U.S. Department of Justice 



Federal Bureau of Investigation 

Washington, D.C. 20535 



November 19, 2007 


Subject: SYSTEM DCS-3000 and RED HOOK 
FOlPANo. 1056287-000 and FOIPA#1 056307-1 


Dear Ms. Hofmann: 

The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOlPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from disclosure, 
with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page information sheet was 
inserted in the file to indicate where pages were withheld entirely. The exemptions used to withhold information are marked 


below and explained on the enclosed Form OPCA-16a: 

Section 552 Section 552a 

®(b)(1) □(b)(7)(A) D(d)(5) 

®(b)(2) a(b)(7)(B) □(j)(2) 

□(b)(3) ®(b)(7)(C) D(k)(1) 

®(b)(7)(D) n(k)(2) 

®(b)(7)(E) D(k)(3) 

°(b)(7)(F) D(k)(4) 

□(b)(4) n(b)(8) n(k)(5) 

®(b)(5) D(b)(9) a(k)(6) 

K(b)(6) n(k)(7) 


763 page(s) were reviewed and 494 page(s) are being released. 

□ Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 

□ referred to the OGA for review and direct response to you. 

□ referred to the OGA for consuitation. The FBi wiii correspond with you regarding this 
information when the consultation is finished. 

□ You have the right to appeal any denials in this release. Appeals should be directed in 
writing to the Director, Office of Information and Privacy, U.S. Department of Justice, 1425 
New York Ave., NW, Suite 11050, Washington, D.C. 20530-0001 within sixty days from the 
date of this letter. The envelope and the letter should be clearly marked “Freedom of Information 
Appeal” or “Information Appeal.” Please cite the FOlPA number assigned to your request so that it 
may be easily identified. 


□ The enclosed material is from the main investigative fiie(s) in which the subject(s) of your request was 
the focus of the investigation. Our search iocated additional references, in files relating to other 
individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information simiiarto the infomiation processed in the main file(s). 
Because of our significant backlog, we have given priority to processing only the main investigative file(s). 
If you want the references, you must submit a separate request for them in writing, and they will be 
reviewed at a later date, as time and resources permit. 

K See additional information which foiiows. 


Sincereiy yours. 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


Enclosure(s) 


Please be advised that this is the seventh interim reiease as ordered by the court on May 7, 2007 for 
documents concerning surveiilance systems known as DCS-3000 and Red Hook. 

The first page of this correspondence reflects that 763 pages were reviewed for this reiease. There were 
actualiy 831 pages reviewed, however, after a review by the technical operations group that manages the system, they 
determined that 68 pages of this materiai was not responsive to the request. 

A decision has not been made concerning your request for a waiver of fees. We wili be corresponding 
with you concerning that request in the near future, in the interim, we are providing you with the enciosed documents. 
Pursuant to Titie 28, Code of Federal Regulations, Section 16.11, there is a fee of ten cents per page for duplication. 

No fees are assessed for the first 1 00 pages. If it is determined that you do not qualify for a fee waiver, duplication fees 
will be assessed accordingly. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to tbe internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation 
with the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) (l) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 

employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 


FBLDOJ 



Freedom of Information 
and 

Privacy Acts 

FOIPA# 1056287 and FOIPAM056307-1 
Subjects: DCS-3000 and RED HOOK 
File Number: ADDITIONAL CD MATERIAL 
Section: 6 



Federal Bureau of Investigation 



•d'dtJtJ'd'd'iJ'ci'ci'd'd'O'dnj'd'd'dmuJ'O'TJ'd'd'd'd'd'd'd'd'^J'd'd'O'd'd'TJ'd'dna'ou'dtJ'tJi-a 
P)P)(U(U(Up)P)(Uplp)P)P){UP)p)Pl(Up)P>iU(tt(l>Pl(tt(Up>(tt(U|U{UP){UP)|UPi|U(l)(Up)|l)P)P)(|){UO 
(q(Q(Q(Q(Q(Q(q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(QU3(Q(Q(Q(Q(Q(Q(Q(Q(Q(QCQ(QCQ(Q(Q(Q(Q(Q(Q(Q(Q ft 
(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D<1>(1>(Dfl>(D(D(D(Dffi(D(D(D(D(D(D(D(D(D(l>(l) 


i^uj(OHovooo«Ja»uii(!»iAJisJMovooo^cnuiit»WMHOu>a 5 ^o\uiitkU)MHo 
) I I I I I ) I ) t t I ) i ) ) I < I t I t ) ) I I t I t t t ) t t t 


tj'o'crtro'tf'd'crcrtrcrtrcrcrcf'o'crcrcrcrcrcrtj'crcrcrtrcrcrcrtrtj'tf'cf'tj'to 

(OtOtOtO( 0 (OtOtO(OM(OlO(OMISJeOtOtO(OtO(OtOI!OtOtOtOIOK}(OtOK}tObOtOtO'> 


oo<iatuii^a>(oi-> 

a 

I I I I J I I J ffl 
H 

crD'trcrcrcrcrcr® 

totototototoioto(D 


crtrt^‘tJ‘ 0 ‘crcrcrt^'crcrcrt^' 0 ‘crcrcrcr&‘&‘crtrcrcrcrcrd‘t>'crcrcrcrcrcrtro^CT\o^o^o^o^o^mo^p) 

o^CT^o^o^ovo^o\o^a^o^o^o^o\a^c\o^o\o^o^a^c3^o\o\o^o^o^o^o^o^o^o^o^o^(T>o^' ' ^ ' ■> » > (q 


crircrcro*d*trtrcr^ 

0 'crcrcrcrtf' 0 ‘trcrcj‘ 0 ‘crcrcrcj‘ij‘crcrcrcrD‘ 0 ' 0 ‘trd*trtrcrD'crcj' 0 'Ci'tri 7 '-j-j-j-j<i-j<j^' 4 in 




crtrtrtf'crcro'b'd'crcrcf'tf'tj'O'crcrtrcf'd'crcrtrcrcrcrcro'trtj'trcrcrcrcr^^^^^^^^^M 





•d'd'd'd'd'O'd'O'd'Tj'd'Ta'd'd'd'd'd'cl'd'd'dU'd'dUJ'd'd'dUJ'ti'd'Tj'd'Tj'O'd'd'd'O'O'd'd'd'd 

Q)P1P)(U(U{U(U{U|U|UPP)(U{I){U|U|U|UP1{11(1)|UP)P)P>P>(UPP>P>P)(I){UP>{U(U|UP)|UP){UP)P)(U 

(Q(Q(Q(Q(g(Q(Q(Q(Q(Q(Q(Q(Q(Q(q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(QU3(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(C|U](Q 

(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(Dd>(D(D(D(D(D(D(D(D(D(D(D(Da>(D(D 


crcrcrtrtro'O'crcrcrcj'tro'crcrcrcro'ircrcrcj'tj'&'trtT'cr&'O'crcrtr&'crcrcrtrcrcrD'crcrcrcr 

nooooonooooooooooooooonooooooorjnoooooonnonon 


trcrcrtrtr&'b'crcrcf'O'&'b'&'O'crcrcrtj'crcrcrcrd'tj'irtrtrcrcr&'tj'trcrcrtF'trcrcrcj'crtro'b' 




•dU'd'd'd'd'd'Ti'd'fl'TJ'O'd'Tj'd'd'd'iJ'd'd'd'O'd'd'O'd'd'Tj'd'TJ'd'O'd'dfd'd'd'dU'OtJ'O'd^d 

Q)Q)p)P)fi>|U{UPPPiP){Upp)|U(l)P>P)P)p)(l){UP>P>P>P>p)p>(U{UPlp>{U{U(UP>{UP)p)(l)p>|UQiP) 

(Q{Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(Q(QU](Q(Q(Q(Q(Q(Q(Q(Q{Q(Q(Q(Q(Q(g(Q(Q(Q(Q{Q 

ffi(D(Da>a>(D(D(D(Dfl)(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(D(Dfl>(D(D(Da>(Da)(D(D(D(D(D(D(D(D 0 

HHHI-'l-'l-'l-'HI-'l-'MHHHHHHHHHHMHHI-'MH'MMMMHHVOUavokOVOvoWJlOVOVoa) 

U)WU>lOIIOISJ(060lOlOtOtOtOHHI-‘l-*HHHI-*HI-‘OOOOOOOOOOlDOO'4a>01i^W(0|->OVD 

toi->ovooo->Jo\uii^u)toi->ovooo>J<nijii^u(OHOvooo'Jcnuii;^u)toi->o 

tlixtixxitl 

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 

cro'trcrcrcrcrtrtrcrcr 

crcrcrtrtrcrtro'tf'O'crcrcro'crcrcrcrcrcrcrcrtrcrcrtrcrcrcrcrcrcrcrMMMtoioioMMMioio 

tOt0N}e0M(0t0(0t0t0Ml!0Mt0MN}N}K>(0(0(0Mt0(0t0t0»Jt0e0t0K>(0l0o s « n « s > > s s «, 

crtrcfcrcrtrtrcrcrcrcr 

tJ'crcrcrcf‘tJ‘0'crc^■CJ'0‘l3‘crcJ*0'b'crcrcrcrcrcrcrcrd'crcrcrc^‘crcrcJ‘b‘o^o^<no^o^o^o^o^o^o^cn 

0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^<^> 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^ 0 ^' ' ' ' '■ ' > > » N N 

cr cr tr cf cr cr cr O' O' tf cr 

tro‘&‘crcrcro‘trcrcrcrcro‘crcrcrcrcj‘cr‘crtr&‘tftrcrcrcrcrtrtr&‘b‘cr>j>j<i<i-o«4<i<i-j-«j<i 

OOOOOOOOOOOOOOOpOOOOOOOOOOOOOOOOO' ' ' ' ' ' ' ' «■ «■ ' 

trcrcrcrtf'tf'b'trcrcrcr 

d'trcfcrtj'O'crcrcrct'tj'crcrcrcj'O'trcrcrcrcrtj'crcr&'&'crcrcrcrcrcrtr'j'j'j'OO'j'j'j'j'j-j 




Page 

133 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

134 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

135 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

136 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

137 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

138 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

139 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

140 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

141 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

142 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

143 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

144 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

145 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

146 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

147 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

148 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

149 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

150 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

151 


b2. 

b6. 

b7C, 

b7E 

Page 

152 


b2. 

b6. 

b7C, 

b7E 

Page 

153 


b2. 

b6. 

b7C, 

b7E 

Page 

154 


b2. 

b6. 

b7C, 

b7E 

Page 

155 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

156 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

157 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

158 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

159 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

160 


b2. 

b6. 

b7C, 

b7E 

Page 

161 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

162 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

163 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

164 


b2. 

b6. 

b7C, 

b7E 

Page 

165 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

166 


b2. 

b6. 

b7C, 

b7E 

Page 

167 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

168 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

169 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

170 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

171 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

172 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

173 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

174 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

175 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

176 

~ 

b2. 

b6. 

b7C, 

b7E 


X Deleted Page(s) X 

X No Dupllcatxon Fee X 

YYYYY YY I YYYY# YTY^f YYYYY 





Page 

177 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

178 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

179 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

180 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

181 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

182 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

183 


b2. 

b6. 

b7C, 

b7E 

Page 

184 

~ 

b2. 

h6. 

b7C, 

b7E 

Page 

185 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

186 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

187 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

188 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

189 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

190 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

191 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

192 


b2. 

b6. 

b7C, 

b7E 

Page 

193 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

194 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

195 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

196 


b2. 

b6. 

b7C, 

b7E 

Page 

197 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

198 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

199 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

200 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

201 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

202 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

203 


b2. 

b6. 

b7C, 

b7E 

Page 

204 


b2. 

b6. 

b7C, 

b7E 

Page 

205 


b2. 

b6. 

b7C, 

b7E 

Page 

206 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

207 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

208 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

209 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

210 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

211 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

212 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

213 


b2. 

b6. 

b7C, 

b7E 

Page 

214 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

215 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

216 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

217 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

218 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

219 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

220 

~ 

b2. 

b6. 

b7C, 

b7E 


xxxxxxxxxxxxxxxxxxxxxxxx 

X Deleted Page(s) X 

X No Duplication Pee X 

X for this Page X 



Page 

221 

~ 

h2. 

b6. 

b7C, 

b7E 

Page 

222 

~ 

h2. 

b6. 

b7C, 

b7E 

Page 

223 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

224 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

225 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

226 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

227 


b2. 

b6. 

b7C, 

b7E 

Page 

228 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

229 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

230 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

231 

- 

b2. 

b6. 

b7C, 

b7E 

Page 

232 


b2. 

b6. 

b7C, 

b7E 

Page 

233 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

234 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

235 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

236 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

237 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

238 


b2. 

b6. 

b7C, 

b7E 

Page 

239 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

240 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

241 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

242 


b2. 

b6. 

b7C, 

b7E 

Page 

243 


b2. 

b6. 

b7C, 

b7E 

Page 

244 


b2. 

b6. 

b7C, 

b7E 

Page 

245 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

246 


b2. 

b6. 

b7C, 

b7E 

Page 

247 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

248 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

249 


b2. 

b6. 

b7C, 

b7E 

Page 

250 


b2. 

b6. 

b7C, 

b7E 

Page 

251 


b2. 

b6. 

b7C, 

b7E 

Page 

252 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

253 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

254 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

255 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

256 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

257 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

258 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

259 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

260 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

261 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

262 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

263 

~ 

b2. 

b6. 

b7C, 

b7E 

Page 

264 

- 

b2. 

b6. 

b7C, 

b7E 





Page 

265 ~ 

b2. 

b6. 

b7C, 

b7E 

Page 

266 ~ 

b2. 

b6. 

b7C, 

b7E 

Page 

267 ~ 

b2. 

b6. 

b7C, 

b7E 

Page 

268 ~ 

b2. 

b6. 

b7C, 

b7E 

Page 

269 ~ 

b2. 
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Freedom of Information 
and 

Privacy Acts 

FOIPA# 1056287 and FOIPA#1056307-1 
Subjects: DCS-3000 and RED HOOK 
File Number: DIVISION DOCUMENTS 
Section: 26 



Federal Bureau of Investigation 



#1056 2|||doo 


b6 

lb7C 




—-Original 

From; 

Sent: 

To: 

Subject: 


——jmwi 

\Ni Tech Victory 



](OTD)(FBI);[ 


SENSmVE BUT UNCLASSIFIED 
NON-RECORD 


]{OTD) (FBI)f 


bo 

b7C 


The service you provided was instrumental in the successful rescue of the kidnap victim. Well done 'b 2 

I— I 

Hopefullv l fc ervice will only improve in case something tike this happens again (should be when it happens 
again). 


b6 

b7C 


Thanks for taking the late night and weekend calls. 

CZI 

— Original 

From: I I sn (FBI) 

Sene Wednesday, Seotember 20, 2006 11:26 AM 

To: I KOTDUEBD 

Ce 1 T siUFBIV.I I (IP) (FBI);| | (IP) (FBI);| I (SI) (CON) 

Subject; Tech Victory ' ' ' ' 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


CZI 


h2 
b6 

b7c The Springfield and Indianapolis Division became involved in a legitimate kidnapping case with ransom last week of a 

fo7E I 


n 1 1 can't say enougi 

aatd. we were able to watch t he'catls as they c ai 
I whprp tn rfintFir in nn finr/ithtl hm 


>e or the 

ind then advise theT 


Jim. 


T g Tg grOT rc w n'n om '- tgfl ' " 


much, but this is really a case which could not have been resolved this quickly without the expertise of our tech 
knowledge, equipment, and experience. Thanks to everyone involved. 


H 1 '^' 


SENSITIVE BUT UNCLASSIFIED 
SE^jSITIVE BUT UNCI^S SI R EP 


SENSITIVE BUT UNCLASSIFIED 

DATE: 06-18-2007 

CLASSIFIED BY 6.5179 dmll/ksr/cb 

REASOET: 1.4 (b, g) 

DECLASSIFY ON: 06-18-2032 

ALL lETFORItATIOII COBTAIHED 
HEPEDT IS OTCLASSIFIED EXCEPT 
lOHEEE SHOW OT0EP.¥ISE 




From; 

Sent: 

To: 

Cc: 


be 

b7C 


Subject: 


UNCLASSIFIED 

NON-RECORD 


CLIFFORD, MICHAEL (OTD) (FBI) 

‘*‘5 2:29 PM 

Tform rFBn 


b2 

fo7E 


Thanks, 


□ 


Weil done. 


be 

b7C 

Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Ope rational Tech nology Division 
(7031 Office) 

(7031 Cell) 

(8001 iPager) 



Sent: Thursday, August 18, 2005 12:36 PM 
To; CLIFFORD, MICHAEL (OTD) ( FBI) 

cc|r~~ ifoTOi (Fsnr 


□OTD) (FBI) 


b2 

hs 

b7C 

b7E 


UNCLASSIFIED 

NON-RECORD 


Mr. Clifford. 

I’m pleased to inform you that TICTU has add ed another entry to our list of VoIP intercept accomplishments. The 
Oklahoma City division is finally collecting on a l ^roet after mu ch effort over the last 

few months. This mark s the FBI's first CALEA-like Vol P telephony intercept rot f . solution offered by 

I i technical agent’) is less th an perfect and took more tiiari 90 days (the period of the first order) 

fo i I to imolernent. TICTU was able guide i i toward a fundamenteil (voice and pen-register) intercept 
capability that is not standard but is func tional, ana so rarine Oklahoma City division is satisfied with the result TICTU 
modified the DCS-3000 system used for| |to accommodate the VoIP audio format 

delivered byl I 

I I fo2 

b6 
fo7C 
b7E 


UNCLASSIFIED 

216 



SEO^T 


4^ S^ET 


CLIFFORD. MICHAEL (OTD) (FBI) 


OTD) (FBI): THOMAS. MARCUS C, (OTD) (FBI) 

F" — |(otd)(fbi) 


O e-mail to 


' ' SECRET 

RECORD RECORD 9999-777 - DL 


Thanks J" | 


Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Ope rational Tech nology Division 
(7031 tOffice) 

(7031 rCell) 

(8001 fPager) 


Original Mes^q,e;,-r; ^ 

From^ rOTD) (FBI) 

sent;'i-riaay, August ub, 2UUb Ai:43 am 
To; CLIFFORD. MICHAEL (OTD ) (FBI) 


lOTD) (FBI) Ke 


UNCLASSIFIED 

NON-RECORD 


Bsked nie to give you an update on thd 


vithi |anri a couple of representatives fr< 

c td fmost wireless service providers offe 


e June. The | I ssue discussed is 
ost have intercept ^pabiltties similar 


snecific td rmost wireless service providers offej land mos t have i ntercept capabilities simila r toi I 

I I The DCS-30p o system has been used in many'easesTO decode T~T nessages intermiletiJronn I I 

I I e.t. al. The OIPR issue appears to be a question 8T DAvi to legally defir| hes^ge 

>ransmi.«;.ginn ann wmrff FISA authority defiaitiaafpplies to the interception oi l fc nessaa as bt^ nq the meeting 
with OIPR anc | | briefly explained ho> | I vorks and how law enforcement intercepts F I The OIPR attorney 
told me that OTPRmay wish for additional inrormation (perhaps a technical briefing for other OIPR attorneys) in the 


SEpRET 





SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

Than M I Great news. 


Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section be 



t'6 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


218 


Mr. Clifford, 



I am pleased t o report that 
of two separat a 
a pen-register intercept of i 


sisted the Buffeilo and New York City field divisions with FiSA intercepts 
subscribers. Also, TICTU recently assisted the New York City office with 
Jelephony subscriber. 


TICTU designed and developed a new int ercept and delivery capability for the 

these intercepts. | pelivers th4 

supported by TiJiu. i ne new bCS-3000 features securel y 

real-time to the appropriate field offices via the DCSnet where me estaoiisned 

to the DCS-5000 systems for collection. 


u Clients route tne inrormatton 


[___^____ifiiiiT pnMnterr.ent i mplBmantatinn is a hybrid solutio 
compliance wim the l fe pecification: CCC information is 

CMTS routers and delivered in native VoIP format via UDP-IP. 


implementation is a hybrid solution: CDC data is accessed and delivered in 
specification; CCC information is accessed by a "CALEA" feature on thei j | 


Jintercept implementation is also ba sed on theT 
felivers the intercepted audio via thel 


These are the first real-time VoIP intercepts conduct 
York office expects to conduct more intercepts witfT 


ipecification. But, unlike I I 

Ifeature much like the wireless carriers use. 


^ intercept techniques. The New 
In the near future. i 


SENSITIVE BUT UNCLASSIFIED 


i OTD^ (FBI) 

March 22, 2Q0 6 10-36 AM 
10TD)f FBI):[ 


RE: IT Informafion Request - Needed by Friday 3/24 


|(OTD)(FBl) _ 
3 oTD)(FBI):[ 


I don't see th e DCS 5000 on the list — 

I Iwould be the POC for the DCS 6000 


— Original Message — 

From: | l OTD) (FBI) 

Sent: Wednesdav,'March 22 , 2006 9:20 Al 

- I 

Subject: p^n^InTonrSBorTRequest - 


™nEBQ 

>i); l t oi 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


o 


□ Pis see below. 

I I nan volt assist this effort by helping to define what is being asked for? I've already requested thatl I 
I lorovide more soecifics. Tks. I—* 


Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 
Quantico. Virainia 


^(OTD) (FBI) 

Mnesoav, March 22 . 2006 8:59 AM 

~To™ . *fTn'> (FBI)C 

i rOTD) (FB1); I I fOTDI (FBI)T 

t: rr Information Request - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
b PN-B PCQRD 


I [ Please coordinate a response to| 


All, Pleas e see below me ssage and ascertain your costs associated with the listed systems/projects. Please provide 
this info t( | | by Thursday, 3/23/06. 

I I Please assis j T vith a coordinated response toj | Note deadline of 3/24/06. Reminders as 

. necessary. Thanks. ' 


Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 


• — Original 

From: I f OTP) (FBI) 

Sent TuKttey. March 21, 2006 4:11 PM 

To: I ' ' '"Ir OTDt (FBI); I 

(FBI)I J(OTDUFBn:l 

Cc: I tlTO ) (FBI); I Ti 

Subject: rr /nRjrmation Requesl - Needed by Friday 3/24 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD coilection systems listed on the 
OCIO master list of systems, applications, databases, and networks. For the systems/projects fisted below, please 
determine or estimate as best you can the cost of the hardware, software, and the development work for the interface 
to the Trilogy networit or other FBI IT infrastructure. This will help us separate the funding of National Security 
Systems fttat are not truly IT from IT systems, databases, applications and networks. Please provide an estimate by 
Friday 3/24. 


b2 

b7t; 




SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 

I tOTDUFBIl 

From: 

Sent: b6 

To: b7C 

Cc: 

Subject: 


UNCLASSIFIED 

NON-RECORD 


(1) Work Flow Manager/DCS-5000: The Telecommunications Intercept and Collection Technology Unit (TICTU) 
has implemented several improvements on the FISA collection system(DCS-5000) which will facilitate the more effective 
and productive use of the Bureau's limited linguist resources. Among these enhancements are ; 





that seamlessly integrates with the FBI's existing enterprise collection systems and will be expanded upon to 
accommodate future VoIP intercept requirements. 


fo7E 


(4) TICTU built, maintained and incurred the cost of operating DCS-NET, a means of moving CALEA derived ELSUR date 
from field office to field office in real time. 

(5) TICTU conducted industry outreach in the telecommunications industry, meeting with representatives of approximately 
130 companies to date to discuss operational issues related to CALEA based intercepts. 


UNCLASSIFIED 


From: 

Sent: 

To: 


be 

b7C 


Subject: 


HOTD) 


(FBI) 


Tuesday. Mav 2 3. 2006 2:40 PM 



FW: m URGENT MESSAGE FROM CIO II! 
URGENT MESSAGE FROM CIO 111 


FBI Mandatory Laptop Registration 


UNCLASSIFIED 

NON-RECORD 


ATTENTION: Revised instructions for completing this task (not just for classified lap tops but 
for all laptops). Each person (Bureau and contractor) must complete this task. 

BUREAU EMPLOYEES: 

Log on to the Web site listed below; confirm that everything listed under your name is what's charged 
out to you; then comple te the task. 

CONTRACTORS: Call | [ and provide her with your laptop bar code (property number) 

and she will provide assistance for you to complete the task. 

Good luck! 

* OTb/esTS/Ticrrr^ b7C 

222 

SE^ET 




b7C 


LET 


o 


a pWPB M ro TD^ ^PB^L 

OTD) (FBfl ^(OTD) (FbIT I IO TP) (FBI)J“ 

OTOHFBD] |(OTD)(FBI) ; 

FW: !!1 URGENT MESSAGE FROM QO !!l FBI Mandatoiy Laptop Registration 


UNCLASSIFIED 

NON-RECORD 


I {wanted me to contact all TICTU Bureau personnel and clarify that according to the 

"urgent" message below: be 

(1) The FBI has received a data call from the Department of Justice and the Office of Inspector hi( 
General for a comprehensive listing of ail classified laptop computers. 

(2) If your laptop is registered in the Property Management System/Issued Personal Property, you 

will receive an e-mail directing you to validate your existing registration information (you will 
probably receive an e-mail tomorrow since the registration schedule for OTD is Wednesday, 
May 24). 

If you j iave a classified laptop and you do not receive an e-mail, please be sure to contacj | 

Additional questions, pis address to j | 

Thank you. 


— Original Mk 

Fr«n: 

Sent: 


UNCLASSIFIED 

NON-RECORD 


^C0TD)(FBI) 

/.May 18, 2006 11:13 AM 
^lOTD] (FBI) 

l(gTP) (CONt_ 


SSAGEFROMaOli! FBI Mandatory Laptop Registration !!J URGENT MESSAGE FROM QO !!! 


Please run with tills. .. I do not know if this will apply to TICTU, save 5000 and maybe 3000. Registration date 
below is 5/24 with OCIO. Thanks. 


From: HQ_OFFICE_OF_CHIEF_INFORMATION_OFnCER 

Sent: Thursday, May 18, 2006 10:35 AM 

To: FBI.HQ AND FO POtS 

Subject: !!! URGENT MESSAGE FROM ao 111 FBI Mandatory Laptop Registratiw IH URtSNT MESSAGE FROM ao U! 

UNCLASSIFIED 

NON-RECORD 




9 


The cost of the hardware, software, and the development work for the interface to the Trilogy network or other FBI IT 
infrastructure for the DCS-3000 system is approximately $750,000 per year. The majority of this cost is for hardware (e.g 
routers and other networ king eauipmentt. The DCSne t costs are approximately $500,000 per year if you include the IP 
service contract we have| lean elatwrate on this topic if needed. 


Original Mpgane 

From: I l oTDt (FBI) 

Sent: Thursday. March 23. 2006 8:56 AM , 

To: I Ir OTDt fFBO i 

Cc: I (CON) 

Sutdect: FW: IT Information Request - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


To All, 

Due to the move, please provid i I with ail submissions no later than 3pm today. l l and I will gather 
the data to send it to the front office later tnis afternoon. 

I It the DCS-6000 does not connect to trilogy, operate remotely over an IT system, or prepares data to be sent 
over an IT system. But, how it relates to DCS-NET may be a different story. So as not to duplicate numbeis, if there is 
an IT cost for the 6000 and DCS-NET, can you include that number (and notation) with your estimate? Thanks. 


— Original MeSMflfi";- 

From: I b ro^ (CON) 

Sent: Th.ir^dav. Marrh73. 2006 8:14 AM 

To; I (FBI) 

Subject: FW: IT Information Request - Needed by Friday 3/24 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Q We should try to complete this task today because tomorrow many of our Trilogy machines 
disconnected by 2 pm. Thanks. 


3 /ESTS/nCTU ^ 


|(OTD)(FBI) 

<larrh 77 ?n nfi 10:57 A M 

IfffrPHreDlZI 

ToTDIfFMi^ 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Pis see below. 


Q 


h6 

hlC 




Supervisory Special Agent 
Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 


Mnggano 

From: I (FBI) 

Sent: Wednesday. M arch 22, 2006 9:28 AM 

To: I K OTPHFBI) 

Subject: RE: IT Information Request - Needed by Friday 3/24 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

hlC 

[ 

This is tied primarily to future requests for money, 300 exhibits and requisition in FY07 and forward. However, foe cost 
of each system should be looked at so we can determine our investment and support needs that are truly IT. We 
would like to know foe cost of the part of each system that is IT (that allows our collection systems to connect to trilogy, 
operate remotely over an IT system, prepares data to be sent over/to an IT system). 

I know this is a little vague but we need an estimate with some basis behiond it. 


s. 



From: f ^ T' OTD) (FBI) 

Sent: WadnPsdav. Marrh y . 2006 9;14 AM 

To: I l OTD) (FBI) 

Subject: RE: IT Intormation Request - Needed by Friday 3/24 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


JriCTU personnel have asked that you specify what time period you are inquiring about, as well as defining 
rou consider IT to be. Are you asking about costs from foe inception of projects that could date back years, 
or something else? Thanks. 


C 


□ 


Supervisory Special A_ 

Tetecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 
Quantico, Virginia 


— Original Me^ 

From: P 

^ 


l(OTD)(FBI):l tOTD)(FBD;r“ 

llTD) 

C«s| 1 

iQii 


3(0TD) (FBI); 

Subject: 

rr Information Requ^ - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 




I | has asked that we determine foe cost of the IT portions of the OTD collection systems listed 

on me uuu master list of systems, applications, databases, and networks. For the systems/projects listed 




below, please determine or estimate as best you can tiie cost of the hardware, software, and the development 
work for the interface to the Trilogy network or ottier FBI IT infrastructure. This will help us separate the 
funding of National Security Systems that are not truly IT from IT systems, databases, applications and 
networks. Please provide an estimate by Friday 3/24. 


b2 

be 

b'7C 


EDMS -IT Interface 
DCS 6000 -IT Interface 
DCS 3000 - IT Interface 
DCSNet (CALEA transport) 
CARTSAN - IT Interface 


a^BOUEagJjly of Systems 
Central Monitoring Plant Network 



Systems Operations Center (CSOC) 


Thanks, 



b2 

b'7E 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


229 


o 


liTs^edule stands today,! Ihas volunteered to represent the DCS-5000 team. I do not think any one will 
0 him. I I 


I I - please fonward the information asked by 
IS needed. Thanks. 


him before the 30th. Also, advise if additional assistance 


— Original Message — 

From: i rnrm^ (fbi) 

Sent: Wednesday. November 16. 2005 9:09 AM 


D TP) (CON~ 

I: LX-1 Presentation on 12/5/2005, on TTA abilities 


UNCLASSIFIED 

NON-RECORD 


This brief/EXPO which is requested by Counter-Terrorism is being pushed by the front office. 

I believe the DCS-5000, Portabl j ^ nd the DCS-3000 platform is what the division is interested in. 

Please advise and use! las our point of contact 


sfs put this on the agenda for Monday! 


tOTDXFBn 
erTs, 2005 1-.36 PM 
[OTD) (FBI) 

^on 12/5/2005, on TTA abilities 


UNCLASSIFIED 

NON-RECORD 


Afternoon I | here is the follow-up on our brief conversation this morning. As its stands right now OTD is 
scheduletnSmake a presentation like the one made to/at FBIHQ in May of this year. If you could send me the 
name(s) of TICTU personnel that will be handling the TICTU table. I'll need their Name, DOB, SSAN, and Stetus 
(Agent v Support) by 1 1/30/2005. LX-1 Security likes to know who is carrying a gun in the bldg. Here is a simple 
set of driving instructions from Quantico to the LX-1 Bldo: 


Hopefully, I haven't missed any major item, if I did drop me a line. Thanks 




UNCLASSiFIED 



UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIE D 


UNCLASSIFIED 


I I (OTP) (FBI) 


be 

b7C 


From: 

Sent: 

To: 

Subject: 


I l(NK) (FBI) 

ru^aSv.'SeolemKe'r 2Q Q6 10;37 AM 

I t OTD) (FBI): I K OTD) (FBI) 


UNCLASSIFIED 

N ON-RECORD 

b:j 

b7E 

Guys, we are interested in getting (3) three duai graphics cards for our DCS 3000 marhinpc wothnnpht this might be 
good to allow the monitors of the Title Ill's to be able to monitor Uie DCS 3000 and th^ ^t the same time 

without toggling back and forth. What are your opinions of this? 


Sfi i 

Newark Divisi^ 


Nev^ 

973r 


be 

fo7C 


UNCLASSIFIED 


I I (OTP) (FBI) 


From: 

Sent: 

To: 

Subject: 


I \ (SJ) (FBI) 

' kb: llUIUComputeryasId Training 


UNCLASSIFIED 

NON-RECORD be 

b7C 

Ok, send the CD down. Thanks, | 


S an Juan Divis ion 

78^ Icell) 





tT 


— Original 

From: 

Sent 

Cc: 

Subject: 






TJnjtsda^jJune_22^2^ 

TICTU computer Based Training 


i rri _ 

JTD) (CON)J_ 


UNCLASSIFIED 

NON-RECORD 


]ofn>) (FBD 


fee 

b7C 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts.as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TiCTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 

If you are unavailable to review this c ourse, please let us kno w. Questions concerning this course review can be 
directed to | ^ t (7Q3)j | 


Thank you for your help ensuring that we produce a quality training product. 


■■'PianKs. 



be 

fo7C 


UNCLASSIFIED 


UNCLASSIFIED 


IfOTD) (FBI) 


From: 

Sent 

To: 


1 ILVl (CON) 


>rjdajLJ,une 23, 2006 12:22 PM 
1 lOTD) (FBI) 

Cc: 

be 

1 (CON)I 

|lV) (FBI)[ 


b7C 

(LV)(CUN) ' 


Subject 


RE: TICTU Computer Based Training 



] 


UNCU^SIFtED 

NON-RECORD 



I would be happy to participate. It's the least I can do to show my gratitude for the outstanding support you and your 
section provide daily. 

Please mail to rny TA; g 


La^ Vega^, NV Hti'IlM 
Thanks, 


s* 




9 





UNCLASSIFIED 

NON-RECQRD 


JtD)(FBI) 


h6 

b7C 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training courae and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21, 2006. 


If you are 
directed 


e unavailable to review this c ours e oleasei let us kn ow 

tc f k (70 ^ I 


Questions concerning this course review can be 


Thank you for your help ensuring that we produce a qualify training product. 
■ Xhan ka-. 

I 1 b7C 


UNCLASSIFIED 


UNCLASSIFIED 




](OTD)(FBI) 


From: 

Sent: 

To; 

Cc; 

Subject: 






DCS^OOOandQ 


J(KX) (FBI) 
M06 8:11AM 
J0TD)(FBI) 


]OTD)(FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b2 

b6 

b7C 

b7E 




Two things, 1) I received the DCS 3000, but there was no F number with it. l H are you available 
tomorrow to swap? The tracking computer has 32 GB of free space so we should be 

good to go. 

2) | ~~1 fixed the dialed digit extraction problem, they had some table mis- 
matches, all is well. The local guy at the switch put up a test phone to diagnose the 

problem. We will give him some Knoxville Swag. Do you guys have any TICTU Swag? 

234 

SE^T 


sa F 

Knoxville Dtvision 


Office 861 
Cell 861 


3 LjlVISIon , 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED 

l(OTD)(FBI) 


From: I becD)fCON) 

Sent: Wednesday. Mav 10. 5fl06 5 :16 PM 

To: I (FBI) 

Subject: RE: DOJ IRP EXERCISE 


UNCLASSIFIED 

NON.RECORD 


Thank you. Please send the Lessons Learned as soon as possible by completing the tables, considering/pondering the 
questions that immediately follow the tables, and providing a lessons learned summary based on your 
answers/conclusions to the questions. 


□ 


O riginal Message 

From J "I fQTD^ (FBI) 

sent; Wednesday, May 10, ,,,2006 10:57 AM be 

To i E ecD)(CON) fo7c 

Subject: RE; DOJ IRP EXERQSE 


UNCLASSIFIED 

NON-RECORD 


Required documents for tile DCS-3000 are attached. 


-Or iginal Messaoe- 


□[SecD)(CON) 

Se nt; Wednesday. Mav 03, 2006 3:26 PM 






subject' DOJ I 


r OT D't rPBT^: V 

l(OTD) 

V EXERQSE 


S^T 

- iOTD)(FBI);[ 

JOTD) (FBI) 


e 


](OTD) (FBI); 


be 

b7C 


UNCLASSIFIED 

NQ N-RECOia D 


I t CSO/OTD) provided a list that identified each of you as POCs f or several sy stems that need to be 

represented in the Annual DOJ IRP Desktop Exercise. This list was provided by| [n response to an EC 

soliciting POCs for specified FBI systems. ' * 


In order to comply with Federal Information System Management Act (FISMA) requiremente, DOJ must test, at. 
least annually, all component computer system Incident Response Plans (IRPs). This "test” or "Exercise" verifies 
that all components have (1) incident response plans (IRPs) , and (2) that components know where they are and 
use them. The results of the desktop exercise reflect not only the components IFBI1 computer security posture, but 
also the Departments computer security posture. 

You were identified by your respective Division/Field Office CSO as the point of contact to participate in this years 
DOJ IRP desktop Exercise and you should have been contacted by your respective CSO regarding this as well as 
the systems you will be representing. This effort should take approximately 15-30 minutes of your time to 
complete. Once completed, the required documentation will be e-mailed from you to TCEARHART@fbinet.fbi for 
compilation and dissemination to DOJ. Additionally, a Lessons Learned report will be required and must be 
received by May 10,2006. All required documents/tempiates are attach^ to this e-mail. 

Below are: (1) The section of the EC indicating the systems that need to be represented and (2) the instructions 
for particip^on in the desktop exercise. 

If any of the systems do ngi have an ATO or they are unknown, or you are not the appropriate POC, please 
indicate so in a response e-mail. Otherwise, please follow the instructions pertaining to the exercise and post- 
exercise. 


This exercise should take no longer than 15-30 minutes to complete. The exercise documentation is due to me 
NLT 12:00 noon. Tuesday. 10MAY2006 : 

"Set Lead 25: (Action) 

OPERATIONAL TECHNOLOGY 

ATQUANTICO.VA 


bl 

b2 

b7E 


Provide the names and phone numbers of the designated representatives of "CART FOS," "CARTSAN," "CEAU 
SCIF CPUs." "Centra Server/Symposium." "Cl NET," "CMPNET," "CSOC," "DCF SL." "DCFS," “DCS 3000," "DCS 


50UU. uus euuu. UUS Nt 1 1 


' 

^ ; ,;-£~ 

□L 


IZP>CZ 

=ftz 

r wno wjij oaiiuiui 

PH_I 

this 


b7C 


EXERCISE INSTRUCTIONS : 

1. Review the scenario’s (choose the scenario that best applies to your system(s)). (The questions accompanying 
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M 


UNCLASSIFIED 


c 


HOTD) (FBQ 


From: 

Sent: 

To: 

Subject: 


he 

lb7C 


I |(DN) (FBI) 

' Wednesday. April 20, 2005 12:02 PM 


UNCLASSIFIED 

NON-RECORD 


Thanks for the info . t have printed all of the attachement and the agent is reviewing the info. He does have a question re 
[Oie :Denver then the server name is denver multiserver then ! ^ He was 

]lS it just the server that it happens to be going through ? Or is it something that he 


vtrhen the target says c onnection nam e ; Denver then the server name is denver multiserver thei 
questioning why it savs l I IS it just the server that it happens to be going through ? C 

should be looking at when deciohenna the codes? ILetm e know if you have a minute or if you need more details the 
agent is l “1 and his cell is 30r ~ • ■ " — ■ • - 


^r jsutcall me . THanks ^ | 


fc2 


Original Message 

From; f 


□:UD) (FBI) 


b6 

b7C 

b7E 


Sent: Friday, April 15, 2005 3:15 PB 

]DN) (FBI) I | (DN) (FBI) 


Su^ 


UNCLASSIFIED 

NON-RECORD 


□ 


UNCLASSIFIED 





Sent: 

To: 

Cc: 

Subject: 


be 

b7C 


RE; Laptop Issues 


3 ITD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


be 

b7C 


rain we had a similar problem with our DCS-3000 Controllers (e.g. laptops) and I'm not sure how we handled it I 

seem to recall that we went through a Certification and Accreditation (with Security Div^ l I s in charge of that 

program. May I suggest that you contact him and if he can not help come back to me and we’ll talk to our IT POC in 
ITOD. 


b6 

b7C 


^tnanKsln advance for help. 


Electronic Surveillance Technology Section 
Investigative Technology Division 
0 . yiroinia 


3uantico. Viroinia 

'°t_] 


□ (nT>)(FBI) 


Se nt; Wednesday, Novem ber 24, 2004 10:03 AM 
To i ^ (HD) (FBIi 


□iTDHFBI) 


UNCLASSIFIED 

NON-RECORD 

be 

b7C 

□ 

I was directed to contact you concerning our laptops that are used with our specialty test equipment These laptops 
are not used as computers, but as controllers for our equipment. However, since they have Operating Systems and 
look like laptops to the ITS group, we have been told all of them have to have PointSec or equivalent security software. 

The problem occurs when it can no longer control the other equipment due to the security software and its 
restrictions. This will be detrimental to the TSCM group, since most of the newer equipment including the x-ray items 
are being controlled by laptops. These same laptops are not connected to any external or internal networks, they are 
strictly used as TSCM test equipment I would prefer that for inventory purposes they be entered as controllers and 
not laptops, along with a DOJ waiver stating the same. It would be beneficial for the waiver to call tiiem controllers 
and not be considered laptops for inspection purposes either. We have had some instances where the techs have 
taken them down to the ITS group for inspection only to lose the laptop to surplus or reformatting due to the out of date 
systems and software on the laptops. This makes them unusable to us and hard to replace, since we need the old 
software so we need an old laptop. We should still be able to show the inspector the item as a controller to account 
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SEWET 


— OriQinaj_M^ag^ 


3oTD) (FBI) 


Sent: Friday. August 04. 2006 9:00 AM 

, e I TO! I / ■ i (OTD) (FBI) 

Sii^KtrREl Symposium Follow-up Questions 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Wow, That is amazing. Good io j l and thanks for the details. I'm n ot sure i f our northern friends have the 

( S ) eame problem- Do you-see any proBlem in sharing this information withl^^since it’s a North America (maybe 

U.S.) issue only. 

Also, do you know if there is anything being done with Nortel on the "*82" problem thru our CALEA test team. 


' AiaitilU llt &BmW ITItlBf 
Electronic Surveillance Technology Section 
Operational Technology Division 


bl 

be 

b7C 


— Original Mess age — 

rom: 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


(S) 


CD 


the problem i describe h eeting is related to wireless number portability. Today, U.S. wireless 

service providers are required to comply with the wireless number portability (WNP) mandate issued by the 
FCC a few years ago. WNP allows a wireless subscriber to take his/her telephone number from one carrier to 
another carrier. In essence the subscriber owns the telephone number, not the service provider. This 
mandate created technical problems for the U.S. wireless providers because their switching infrastructure 
routes calls based on telephone numbers; earner owned (internal numbers) are usually routed differently than 
external numbers. 


fo2 


b7E 


b2 

b7E 


Before WNP, routing calls were simply based on routing tables, which were populated with NPA-NXX and 
trunk combinations. These combinations are point codes the switch uses to determine how to route the call. 
WNP blurs t he distincti on between internal and external numb ers, an d therefore complicates call routing. For 


exa mple, if 


"IsubscrII 


s own and route it as if It 


decides to switch service to | l and reqi 
•fitch |nq netwo rk will have to accept the externa| 


to be ported 
signed number 


To route and manage external numbers as internal numbers, the wireless providers use a technique called 
"number pooling". This technique allows the service provider to commit a block of numbers per switch to a 
pool of numbers that are assigned/owned by the carrier that are only used for internal routing, never (in theory 
at least) to be assigned to its subscribers for external use. When a foreign/extemal number is ported into the 
switch with a new subscriber, one of these internal numbers is assigned as an alias to the new subscriber's 
account, and the switch uses this internal alias number to internally route calls to and from the subscriber. 
This technique allows the wireless providers to implement WNP without having to redesign their entire 
switching infrastructure. 


We have found an evidentiary pmhiP^ naitspH hv snmft 1 1 s Mnroipsg providers' implementation of number 
■PQQlinfl, Thft[S"4H)aRRtLnmvidersl tnd otfaaLCDJIi^DMA providers) use the 

I I feature of IS-41 to i mol^ ent 

number pooling. These carriers usually assign one of the numbers from their internal pool to the|_^_|nd 
assign the external directory number (either one of their own numbers or the ported number) to the | ^ 

241 


ibl 

b2 

be 

b7C 

fo7E 


r_Q 


h'2 

b7E 


IS 


€ seX|t 41 

I "lassiqnpri to the phone. Note thol fe thaniimharneaw hy (he fest of the world to 

call the subscriber. In re cent int ercept cases, we have found tha J I S-41 -based switches 

sometimes only report th | | 3f the calling party for incoming calls. We have found this to happen when the 

associate calling the targk is a wireless subscriber served by the same carrier and the same svuitclus the 
target for the call. In this scenario we have fouocUise JSI VoiceBox III (version 3.6) extracts the | | as the 
calling party number, which is not the extemanZjof the calling party. This error has recently misled a few 
FBI investigations. In one case, the interceptla i b fthe target’s associate was actually assigned as a | | 
to another subscriber with no relation to the target. Due to the misinformation presented in the call records, 
the unrelated subscriber was temporally included in the investigation. 

We remedied this prob lem on the DCS-3000 by ignoring the l b f the calling party in the| | 

I i iessaoe and using the caller id field that is usually presented in the Neiwcrx ;:>ignat 

message that is delivered for incoming calls. In the case where the calling associate blocks his/her caller id ^ 

and the Network Sig nal me ssage does not present ttie caller id we simply leave the calling party number blank 
rather than using the ! I 


if sure if Canada has the same pmtilem. But, I thought it was appropriate to shar^ 

St in case. Also, we notified JSI about the problem a few weeks ago; and hopefully they will hav< 
in that solves the problem. 


a 


There was a second problem that J i.nformedthJ lubgroup: the "*82'’ l l oroblem. This problem 

was documented by the SOLVED lab when tesmg uiu JmS platforms many yeare ago. If an intercept target 


dials 
call), thi 

content nor the digits dialed after "*82". 


□ 


ible caller id blocking (to allow his/her caller id to be delivered to the called party for the one 
* IS platforms cease call intercept, and law enforcement vi/ill not be able to intercept the call 

b2 
b7E 


be 

b7C 


□(OTD) (FBI) 


Wednesday. Augua:02. 2 006 4:S9 PW_ 

](OTD)(FBI);r 


(S) Subject: 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


](OTD) (FBI) 


be 

b7C 


^1 may hav 


I may have missed you response, I got a lot of e-mail to catch up on. Please see the note below, (your 
comments in "red" ) and provide some feedback to me re your comments in Canada. 


|_^|Comni 


please set ’T" for FIrday 5 August 2006. 


I indicated that imder certain circumstances, 
J switches can provide "incorrect" 


metadata (specifically, metadata that are linked to 
subscribers other than the target (s) of an interception 
operation) . 



Electronic Sunreillance Technology Section 
Operational Technology Division 

SE^|(ET 


9 





SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


nz 

From: 

Sent: 

To: 

Subject: 


(S) 


loTDHFBI) 

I l OTD) (FBI) 

I lOTD) (FBI) 

- Hh \ | i;P|!iAjiurVi holl^-up Questions 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

bl 

/ S ) WoWr That i&amazing.. Qpod Jot j j and thanks for die details. iBLoatsure if our northern friends have the same b 6 

problem. Do you see any probiem in sharing this information withl bince it’s a North America (maybe U S.) issue b /c 

only. I I b7£ 

Also, do you know if there is anything being done with Nortel on the "•82" problem thru our CALEA test team. 


Assistant section Chief 

Electronic Surveillance Technoiosy Section 

Operational Technology Division 


QnantiMi Virginia 

I 


— Original Message — 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


loTD) (FBI) 


bl 

b2 

be 

b7C 

b7E 


□ (S) 


The problem I described at th 
providers are required to com| 


a ieeting is n 
e wireless 


related to wireless number portability. Today, U.S. wireless service 
wireless number portability (WNP) mandate issued by the FCC a few years 
ago. WNP allows a wireless subscriber to take his/her telephone number from one carrier to another carrier. In 
essence the subscriber owns the telephone number, not the service provider. This mandate created technical 
problems for the U.S. wireless providers because their switching infrastructure routes calls based on telephone 
numbers: carrier owned (internal numbers) are usually routed differently than external numbers. 



Before WNP, routing calls were simply based on routing tables, which were populated with NPA-NXX and trunk 
combinations. These combinations are point codes the switch uses to determine how to route the call. WN P him 
distinction between internal and extern al numb ers, and therefore complicates call muting Forexamnie. ifal 
subscriber decides to switch service t d fe nr^mmiptste hir number to be ported from| 
switching network will have to accept the extemal| {assigned number as it's own SPld POUIS It SS IT It Dgldn( 


To route and manage external numbers as internal numbers, the wireless providers use a technique called “number 
pooling". This technique allows the service provider to commit a block of numbers per switch to a pool of numbers 
that are assigned/owned by the carrier that are only used for internal routing, never (in theory at least) to be assigned 
to its subscribers for external use. When a foreign/extemal number is ported into the switch with a new subscriber, 
one of these internal numbers is assigned as an alias to the new subscriber's account, and the switch uses this 
internal alias number to internally route calls to and from the subscriber. This technique allows the wireless providers 
to implement WNP without having to redesign their entire switching infrastructure. 


We have found an evidentiary problem caused bv sorpe U.S. wireless providers' imolementetiori of, number pooling. 

The IS^1 based oroviderd bnd other CDMATTDMA providers) use th j | 

I fe ature of IS-4iJojmplement number pooling. These 

earners usually assign one of the numbers from iheir internal nool to t he ! la nd assig n the ext ernal directory number 
(either onejatlheir own numbers or the ported number) to the I I Directory Number |~~^T assigned to the phone. 

Note thel lis the number used by the rest of the world to call the subscrib er. In recent imer^pt cases, we have 
fc'S found that ! B S^ 1 -based switches sometimes only report the of the calling party for incoming 

b7 E calls. We nave touno tnts to happen when the associate calling the target is a wireless subscriber served by the same 
carrier and the sy te switch as the target for the call. In tills scenario we hav e found the JSI VoiceBox III (version 3.6) 
extracts the | ^ is the calling party number, which is not the externaj|_lof the calling party. This error has ib 2 
recently mis teOTnew FBI investigations. In one case, the interceptec i |d f the target's associate was actually ^ 7 p 

assigned as a| j to another subscriber with no relation to the target uue to the misinformation presented in the 
call records, the unrelated subscriber was temporally included in the investigation. 

wgrptnpHipri this problem on the DCS-3000 by ignoring th j | ?fthe calling party in th j | 

I liessage and using the caller id field that is usually presented in the Network SighsrmessageinsriSTlsntier^ 

Tonneoming calls. In the case where the calling associate blocks his/her caller id and the Networ k Sinna i message 
does not present the caller id we simply leave the calling party number blank rather than using the | | 

f ^ ^ i am hot sure if Can ada has the same pfdbTem "] 

Just in case. Also, we notified JSI about the problem a few weeks ago; and hopefully they will have a patch souii uidi ' 
solves the problem. ’bl 

J ^ I There was a second problem thathinfoimed Biel Uubgroup: the "*82" | Ip roblem. This problem was 

I ^ Jl ddeumehted by the SOLVER lab when testing tlRJ UIVIS platforms many years ago. If an intercept target dials ''^ 2" to 
' ' disable caller id blocking (to allow his/her caller id to be delivered to the called party for the one call), the I D MS 

)bi platforms cease call intercept, and law enforcement will not be able to intercept the call content nor the digits dialed 
after "*82". 


— Ori ginal Message — 

From; I P TPi fFsn 

Sent. Wedn^av! Xuaust 02. 1 006 4;59 PW 

T®: I 

) ^ I I I I (OTP) (FBI) 

' Subjeidb FW] iSymposium Follow-up Questions 

SENSITIVE BUT UNCLASSIFIED 
NON.RECORD 


^ rrifta'S^ave missed you response, I got a lot of e-mail to catch up on. Pleas 
in "red" ) and provide some feedback to me re your comments in Canada. 


! see the note below, (your comments 


[ET 


o 


SENSITIVE BUT UNCLASSIFIED 


From: 

Sent: 

To: 

Subject: 


be 

fc7C 


"I (OTP) (FBI) 


I l OTD) (FBI) 

Tuesday. June ia. 2006 9:0 6 AM 
I l (OTD) (FBDd 

I- w; Kequest email copy ot DCS3000 ATO 


]OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


— Original Message- — 

From: i f SecDVCnN') 

Sent: Monday. June QS. ,2QQ6 9:33 AM 

To: I ^ OTDJ (FBI) 

Subjeil: RE: Request email copy of DCS3000 ATO 

UNCLASSIFIED 

NON-RECORD 


b2 

b7E 


..huh, what??? (kidding....) - 

Here ya go! Please ^^ e conclusion portion of the POA&M doc, that mentions the 1 020v & | | oi 


tX:F3000 DCS-3000 ATO EC 

POAM.doc (128 KB) 060l2006.wpd (... 


Quantico Complex 

CIS M. CISSP. 1^ . PSEC, MCSE 

9, room 8-LL-14 

..."lead, follow, or get out of the way." Thomas Paine 


be 

b7C 


— Original 

From: i ^ roTPJ (FBI) 

Sent; Monday. June 05. 2006 9:23 AM 

To: I fe ecDJfCOm 

Subject: Request email copy of DCS3000 ATO 

UNCLASSIFIED 

NON-RECORD 


□ 

Could you email me a copy of the DCS 3000 ATO so I could review it 


[ 


UNCLASSIFIED 



b6 

fo7C 



UNCLASSIFIED 


fob 

lb7C 


SENSITIVE BUT UNCLASSIFIED 
I IroTDUFBIl 


From: 

Sent: 

To: 

Cc: 

Subject: 


^OIPP) (CON) 
inffQjRAM 


— I QTD^ /FRh 
j[0iPP)(FBI)|; 


FW: FISMA Systems Reporting Requirements 


30IPP) (CON) 



}lankBk9rd.gif(234 

UNCLASSIFIED 

NON-RECORD 


bb 

b7C 


Per conversation \with l t iis morning, she informed me that you needed further information 

on the FISMA reporting requirements. The email below was sent on April 26, 2006 with explanation 
on collating CR information from your system. Another request for May 2006 report was sent to you 
on May 31, 2006. I will forward this email to you following this message. 


If you should have any questions, please give me a call. 

■Thanhs 

'ocio/oiPf^/iJpMU 

Cor ifiauration M anagement 
202I IfJEH) ^ 

202^ I 


b2 

be 

b7C 

b7E 


-—-O riginal Messaqe- 

FromL 


JOIPP) (CON) 


Sent; Wednesday, April 26, 2006 9:32 AM 

ToJ ~lr OIPMVFBn: f 

I l(OTD) (FBI)| T3B5JH 

suQeeimsm^ ms Reporting Requirements 


FBI) 

JoiPP) {(X)N) 


](iroD)(FBI);[ 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


The Process, Policy and Metrics Unit (PPMU), Office of IT Policy and Planning (OIPP) was tasked by 
DOJ in October 2005 to provide board minutes that includes Security Issues/Impacts/Comments for 



all Change Requests submitted for FISMA Systems that are under the DOJ Authority. According to 
the new FY06 FISMA IT Inventory List, certain projects under your division were listed as one of the 
FISMA Systems. The following systems were added to the FY06 FISMA Inventory. We are currently 
collecting information on these systems that includes the name and phohe number of the system 
ISSO, Project Manager, and Configuration Management Staff. 


CPUIMS 

DCS3000 

R-DEx 

WACS 


3i§SO) 


^ ISSO) 


3[ISSO) ? 


foe 

b7C 


Once we've collected the POCs, we will be requesting a monthly report for your system. The System 
Owner (PM) is responsible for coordinating with the System ISSO on any Change Requests (CRs) 
associated with the system. The ISSOs are required to review all CRs for any impacts to the system 
and provide their decision prior to the system level board meetings and that decision must be 
documented in the board minutes. The following templates are to be completed and fonvarded to 
PPMU. The next report to PPMU is due by COB Friday, May 12th. 


Please provide as much information as you can or point us to th€ 
information. If you should have any questions, please call me at 


Thanks, lb 6 

b"/C 


riant nerspn to Obtain tnese 


> riant nersj )i 


c 


I 

OCIO/OIPP/PPMU 


Con figuration M anagement 
2021 IfJEH) 


foe 

b7C 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 

UNCLASSIFIED 


JOIPP) (CON) 
r2:23 PM 


Systems Certification Tracking Report for April 2006 


The following systems have not responded with a monthly status for April. We would like to submit our report as soon a 
possible this week. Please forward the CR Tracking information by COB Wednesday, June 17th. 

AMA 

BPMS 

CHEMNET 

CODIS 

CPUIMS 

CART SAN 

DCS 

ODMS 

DOC LAB 

FMS 

PTSS 

SACS 

WACS 

XTS3000 


Luuiu i phJ »pi 


UL.1U/UIPH/PPMU 
Co nfiguration M anagement 
l(JEH) ^ 







SecD)(FBI); 


(OIPP)(FBI) 


ystems Certincation Tracking Report for April 20i 


UNCLASSIFIED 

NON-RECORD 


Please provide the Change Request (CR) status for your system during the month of April 2006 by COB Friday, May 12th. 
The attached template needs to be completed and forwarded back with your signature (type your name on the signature 
line), even if there's been no change to the system. 

Please keep in mind that the System Ovimers (PMs) are responsible for coordinating with the System ISSOs to review all 
CRs associated with the system. The ISSOs are requried to review all CRs for any impacts to the system and provide 
their decisions prior to the system level board meetings and the decisions must be documented in the board minutes. 

If you should have any questions, please feel free to contact me. 



UNCLASSIFIED 


UNCLASSIFIED 








The Process, Policy and Metrics Unit (PPMU), Offi<» of IT Policy and Planning (OIPP) was tasked by 
DOJ in October 2005 to provide board minutes that includes Security Issues/Impacts/Comments for 
all Change Requests submitted for FISMA Systems that are under the DOJ Authority. According to 
the new FY06 FISMA IT Inventory List, certain projects under your division were listed as one of the 
FISMA Systems. The following systems were added to the FY06 FISMA Inventory. We are currently 
collecting information on these systems that includes the name and phone number of the system 
iSSO, Project Manager, and Configuration Management Staff. 

CPUIMS 
DCS3000 
R-DEx 
WACS 

Once we've collected the POCs, we will be requesting a monthly report for your system. The System 
Owner (PM) is responsible for coordinating with the System ISSO on any Change Requests (CRs) 
associated with the system. The ISSOs are required to review all CRs for any impacts to the system 
and provide their decision prior to the system level board meetings and that decision must be 
documented in the board minutes. The following templates are to be completed and fonArarded to 
PPMU. The next report to PPMU is due by COB Friday, May 12th. 

Please provide as much information as you can or point us to th e right person to obtain these be 
information. If you should have any questions, please call me at | I b7c 

Thanks, 

b2 
be 

b7C 


OCIO/OIPP/PPMU 
Coi ifiauration M anagement 
202 IfJEH) 

202 ^ 



258 

SEpR^ 


UNCLASSinED 



□ 

Thanks for your help. I need to check with my boss to see if the Trilogy application will address what she's looking for. 
She may actually want to get a copy of your database if that’s something you can share. I'll let you know. 


Thanks again, be 



UNCLASSIFIED 

NON-RECORD 



259 


SEQ^T 



](ITD)(CON) 
1.2Q05 11 45 AM 
I^(lTD)(FBI) 


UNCLASSIFIED 

NON-RECORD 


I I forwarded me this message today as a topic I should include in the EAD report this week. Beyond what you've 
written below, is there further information that I can include in the report? Perhaps a quick non-technical explanation of the 
technology to include for the AD and EAD? 

Thanks, 


— O riginal Message — 

From! ! Tt td^ (FBI) 

Sent: Monday, January 31, 2005 8:22 AM 

To;| |{UD)(CON) 

Cc:| IflTDUCONl 

Subject: FWl I 


UNCLASSIFIED 

NON-RECORD 


This should be written up for the EAD report. You will need to get further details frorrl 


— -Original Message- — 

From:| | (TTO) (FBI) 

l-nHav. PM 

ToJ TdTDHFBI) h2 

cc;i Irrmi (fbuJ |itd) (fbi) fee 

Subject^ I b7c 


UNCLASSIFIED 

NON-RECORD 


260 


SBIT is assisting the Miami Division with the FBI's first-evei j t elephone intercepts. Miami "went up" on four 

pen-registere yesterday and expects to implement an emergency usa eitner tonight or tomorrow. Miami is using the 
DCS-3000 system to collect pen-register data and the | p or T-50 audio. I'll keep you informed. 

□ he 

hic 


UNCLASSIFIED 


UN-CLA SStFlEO 


UNCLASSIFIED 


[ 


From: 

Sent: tg 

.To: lfo7c 

Subject: 


lOTD) IFB\) 

I "IfPDWFBh 

■ Friflav Marr.h?4 ?nnfi.T.yPM 
I (FBI) 

QWEST email for Monday's test in Portland 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



QWESTCALEA.doc 
(61 KB) 


Mi l b isreoard my earlier VM about T1 circuits. I figured that out after looking into our records. T1 needs to get 

connected into DCS-3000 on Monday for testing. Talk to you then. 


SENSITIVE BUT UNCLASSIFIED 


DCS3000 


From: 

Sent: 

To: 

Subject: 


I 

[ 


J(NY) (FBI) 


asLl2ctaiaeU2^004 9:31 AM 
InTDUFBH 


UNCLASSIFIED 

NON-RECORD 


be 

fo7C 


^ Thank! 


c 


;s for the updated FISA database. Looks good and satisfies all of my present needs. Thanks again. 
Tpia 


New York. SO-1 


New 

2f2[ 


1 


UNCLASSIFIED 


I I (OTP) (FBI) 

From: I , If SAifFBI) 

Sent: bg Thursday. August 2472006 6:18 PM 

To: b7c I _ _ "'I fOTDi (FBI) 

Subject: DCS-3000 SAHQ new office 


UNCLASSIFIED b2 
NON-RECORD b 7E 


He j i n or around June 2007 we will be moving into our new office. I want to fix up our DCS-3000 for our new office. 

If possible a rack mounted DCS-3000 with a router that will connect all the RAs in a fashion that is more manageable then 
we have it now Ou r current CPU is four years old. We have two routers, 4 Adtrans DSU, two router mounted DSU, a 
modem foi l l and several other boxes. If you need a RMS request please advise. Also, if you want a trip to SA, you 
are welcorne anytime to survey the office. Thanks for all your help. 



UNCLASSIFIED 


262 





Greetings Gentlemen, 

I hope you had a peaceful Memorial Day Weekend. b2 

I have attached my list of Switch addresses. Could you please review for correctness? I know you are constantly be 
updating and changing switch addresses. ^ b7c 

I did not have anything loaded in the BQ Voice Box fo j p nd I was not sure if th q t vIY was still good. I bVE 

did input both and was successful in pinging both. * 

Based on the mptinas last week, if I hav^ ither a j I am under the i mpressio n that I need to set up 

two c pcs. for anv l l One CDC Tor | p ata and one CDC for i tatsr 

If ar ^ l aroet is usino ^ c SM net work, do I aiso need to put the target up in a | P PC? 

The CMP has already ordered the RTF for th j j .and Line CALEA target. I ha ve proviaea ihe CMP vwth the ring 
down number for the audio for the T-3. It is my unaerstarfding that the CMP will input th ^ p ALEA pen data into the 

DCS-3000. You will establish ajigadE^ddress and provide me with the IP address, pon numusr.'etc. that I need so I can 
get the pen data in the RAs for i L and Line CALEA. 

I will be in the BQRA on Tu^day, buf not at my desk. Please either call my cell phone| pr page me at 

888| Icell phone does not work well in Server room.) 

ThanK you 


SENSITIVE BUT UNCLASSIFIED 


fOTD) (FBI) 



PenRegfeter 
Evidence.doc (57 

UNCLASSIFIED 

NON^ECOBD 


The attached document details the current procedures Dallas uses that pertain to pen register evidence. It aiso outlines 
the procedures we wilt implement in the near future and some suggestions for ERF to help us move in that direction. 
Please feel free to share this info with anyone else you see fit 

Once I receive any comments from ERF and find out if our requests can be Implemented, I will prepare a final detailed 
description of the new procedures for Dallas's use and you can post them on the DCS 3000 web page. 


SEflfRfT 



Please contact me if you have any questions or suggestions. 



UNCLASSIFiED 


i IfOTm rFBi^ ^ 

From: . . I ~l (PXWFBn 

Sent: Friday June 30 3006 4 ^0 PM 

To: I IfOTDHFBh 

Subject: ' RE; Setting SMS to TA 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

In that it is content and would not go through standard review like audio-it shouldn't be uploaded. 

I think we are better off indicating that the "event" was SMS with a simple Y/N and not add the text to the record in TA. 
That would be workable wouldn't it? 

That way there is knowledge that it was a text message event, not a standard "call". 


Welcome back by the way. 


— Original 

From: 

Sent 
To: 

SulqecI:: 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


be 

fc7C 


SMS Content is ... . Content. We are working with EDMS folks to develop an interface between the DCS-3000 and 
EDMS. This will allow case agents to get the content via EDMS. I was unaware that TA could handle SMS content. 
We need more infomnation to make this happen, assuming it’s legal. 


□ 


-~0riqlnal Message — 

From: I b n (FBI) b 6 

Sent: Friday. June 30. 2006 3:47 PM b7C 

To; I r OTDI (FBI) 

Subject: Getting SMS to TA 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I just thought of something... would the SMS be content or data? Would there be an issue in putting SMS out 
where anyone could see it? 

Perhaps after listening to two legal briefings I am paranoid, but would this not be unreviewed, unminimized, raw 
content? Almost like post cut through digits, but worse? Perhaps that is why it should not automatically go to TA? 

Did I just give you an out? Or am I being overly cautious? 


— Original Me^age;^ 
From: I 




[PX)(FBI) 


264 




I did hear from the TA group that they plan to include the lAP in their upload. They are setting out a new release 
soon, and I hope that is incorporated into that release for a number of reasons. 


We are providing analysts training here... slowly. I am not really sure they know the difference between a pen, trap, 
toll or subscriber record truly which is a little scary. I fear the eye-glaze over at the mention of lAP but will give 
that up when they push. 



UNCLASSIFIED 

NON-RECORD 


Oh! Nope. There's a couple of problems; 





SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I I b7C 

Several months ago, I spoke to you regording our task force squod that purchased its own Voicebox digital 
collection system and needed the OK from Security Division to use it on FBI cases. This is still in the works on 
our end, but we hove o similar situation regording o portable system and require the input of Security Division 
before we move forward. 

Quantico ERF has supplied our division with a portable Voicebox system, but it is currently in use in our Toledo 
RA. The case agent in our Youngstown RA would like to conduct on upcoming FBI T-III on a digitol system 
{rather than cassette topes), but we do not have another system availoble (niether does ERF). The locol HIDTA 
has purchased a portable Voicebox system and has agreed to let the Youngstown RA use it for this T-III. The 
system will be operated in the RA space ond would be connected to our DCS-3000 network to obtain telephone 
target data. According to ERF, there is an acceptable configuration which enobles secure transfer of the data. 
The issue arises in regards to conducting an FBI cose on a system that is not owned by the FBI. As far os the 
data and audio that will be stored on the system is concerned, if necessary, we could remove the hard drives 
from the system before it is returned to HIDTA (replacements would have to be supplied by the FBI ond 

seMt 



273 



software reloaded by the monufacturer). 


SE&teT 


From the security standpoint, can we use this system to conduct this upcoming T-m? Are there any other 
issues that must be resolved? 

If you have any questions, please feel free to call me. 



Cleveland Division 
2i a I foffice^ 

216] (cell) 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 

I |0TD)(FBI) 

From; I I (SF) (FBI) 

Sent: Friday. September 15. 2006 6:31 PM 

To: Ib6 I IfOTDUFBh 

Subject: ib7c R q | 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



IZZl 


al 


Sent: Friday. Sep tef 

ro: I roT 

Subject: ^ 


](OTD) (FBI) 

imber 15, 2006 1:22 PM 


Saiii 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b6 

b7C 


I I 

I found the problem in the database for the^ 


b2 

b7E 


b2 

b7E 


in San Francisco and have remedied it. 

SE^T 


274 


o 


be 

hlC 


9 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Below is a brief description ofl 
when he comes into the offic^ 
carrier and then looking u o thJ 
DCS1020C server becaus | 
After talking to you this morfra 
is not able to report back thel 


I SF)'s experience. I haven't talke d to him di rectly on this subject but will 
nToSay. It appears that he is getting th | t formation directly from the 

Inform^ ion from the pre-populated database tnaf is available from the 

S oftware in the SUV is not displaying any information on the target, 
scenano he is describing could be one of those situation that the home MSC 
Jelonging to the secondary MSC that is serving the mobile however this is 


not certain and a speculation on my part. When he calls, I will patch you in to share your expertise in the matter.^f 


“We also have an issue with the van integration software not showin g th j b ites. I 

think it is a TICTU related issue revolving around the fact that I t has 2 switches in me S h marxet. w e seem to 
get all the sites for switch 1 but not 2 as they come in on the DCS 3000. We have loaded thd "t fo into our 
laptop and have resorted to doing manual searches for the site based on cell ID provided by n**^unng the call. 

I would like to re pive this as well whil e we are addressing the problems with Metro. Please fei me know if we 
need to talk with! I 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


](SF) (FBI) 

35 5:22 PM _ 
l(OTD)(FBI)r 


UNC L A SSIFIED 

NON-RECORD 


Didn't know who to specifically address this to, so did the shotgun method. 

At our co-location in San Francisco with SBC we have four Adtran TSU 600's. The first three are configured for two wire 
output which will input into the 3094 at the Martinez off site. The fourth will be configured for four wire and will interface 
with another TSU 6 00 in Martinez that w ill input into the DCS 3000 as twelve 64k DDS circuits. Presently we have two 
Adtran DSU 5600's | [ that go into a Cisco 2610 router. There are six serial slots left on the back of the . 

router. ' \ 


SE^T 



® SE^f^ 

Will this mean we will need twelve additional Adtran DSU 5600's to accommodate the TSU 600 and another Cisco 2610 
router? Or, is this where we try to create the 9.6 DOS from SBC as the need arises. Some of the DOS circuits will be 
permanent, but others will be changed as different targets come up. ^ 


^will be going to ERF for the DCS3000 training next week and vwll try to find some time to get your input 


O, I desperately need to be able tcP 


3*0 


, ito the VB system in Oakland. We ha ve both T-lll rooms running 

in ill-; Oakland is running one line and trying t o go up on six more. Can you give me a call 925| ]when you get a 

chance. Thanks for helping our on Saturday, i . i 

I ] I don't think they would of intercepted those calls if you hadn't helped. 


UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


I I (NY) (FBI) 


Wednesday Noverpher 17 2Qf 

)4 9:16 AM 


INY1 fFBh 

L. ' tiTp; 

r™ riTD) (FBI) 


b6 

UNCLASSIFIED b7C 
NON-RECORD 


Thanks Guysl 


1 1 was asked by Criminal Supervisor if it would be possible to have the 
7Jper cell call on the pen register. They now h ave to manua lly look up each[ 


to6 

b7C 


any assistance you can bring to this matter. Thanks. 


rare modified for adding the l 1 
I respectfully request 


— Or iginal Message 

From i I NY1 (FBI) 

Se nt; Wednesday. Novem ber 17, 2004 7:01 AM 

Toj IfNinfFBH 

Cc: 1 I , L (NY) (FBI) 

Subject: Re| 


b2 

b7E 


UNCLASSIFIED 

NON-RECORD 

b7C 


□ _ 

I spoke tor 

I h to the Pen Reports. 


]at ERF. as a follow up to your initial query regarding the feasibilty of incorporating! 


CZI 


I fe poke to l I and they concurred that it would be a major software fix. There is a LOAD issue, and 

they have concems"asTaras overbj^denin^the^c^ Unlike the tracker program, which is a separate utility, and is 


only used on a demand basis, th^ 


database which would be for every call. 


If it was possible, [~~[ nentloned a 6 month interval, before it could be implemented. 


SEI 
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They are having a meeting coming up next week 
possibility of having the report generated with ti^ 


tephone Applications) people, to go over the 
Information. 


Jrequested we put in a formal request via the RMS system, so an official request is documented. I contacted the 
Sgroup yesterday to get a log-in, and will follow through with that request 


— OriginalJ^ 

From | 

SubjectI ~ 


K NY) (FBI) 

gnnprrt, 2004 1:23 PM 
I3 y) (FBI) 

JLJST 


UNCLASSIFIED 

NON-RECORD 


HM ' Cnc 1-701 I 

, UTO THF 

Ia t erf then 

OF INCORPORATING 
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From: 

Sent: 

To: 


to 6 
b7C 


(OTD) (FBI) 


Subject; 

UNCLASSIFIED 

NON-RECORD 



Hello Gentleman, 
We received a |~ 


Thanks. 

cr 


]hardllne on 9/27/06. How will we collect the data for this line? 


b2 

b7C 

b7E 


202r 


] 


— Original Mess Me — 


To: 

Subject 


UNCLASSIFIED 

NON-RECORD 


IWHFBI) 

2006 5:43 PM 
□WF) (FBI) 


be 

b7C 


I 

Hmm- 

Basical! heeds the order then they can give us the date we require. 

I believe the data will co me across the DCS 3000. 

We have a connection to l T throuah the DCS 3000 on the FISA side (2nd floor). 

I don’t know how tough it will be to get it upstairs on the 3rd floor DCS 3000. ® ® 

So -I would actually contact ! ^lown at Qu antico first. 

Let them know we have a pen register order for ! f or a criminal intercept 

Ask them to assist you in setting up the DCS 3000 for this. 

While they are working on that I wo uld^ontec^^^^^To figure out how to get the order to them. 
The contact number foi ^^^"^l laccordino to the TICTU website). - 


Keep me posted on the progress and let me know if there is anything else I can do to assist. 


Thank you, 


b6 

b7c 




he 

b7C 


bo 

b7( 



UNCLASSIFIED 

NQN-RECQRD 

b7E 



Were the calls collected on the OCS-3000? If so, we can give you and the 
Spreadsheet with the call records and hypertext links to the correspondingr 


a CD with an MS Excel 



UNCLASSIFIED 

NON-RECORD 


loTD) (FBI) 


hS 

hlC 


(FBI) 


suid( 


Mn: I IrwF) 

,nf. Tuesday. July 25. 2006 2:25 
I n( OTD) (FBI)J 

P kwn (fbi)F 

iMed P I bVStem 


^ITD)(CQIU_ 


□ (WF) (FBI);[“ 


TwF) (FBI) 


UNCLASSIFIED 

NON-RECORD 



Can we download a number and its information from the| System to a disk? An agent 

is inquiring about this because the attome/s office said he needs the information to present to 
the judge. 


FBI-WPO 

I 1 

IS-2 

202 A I 

SE^T 


280 


UNCLASSIFIED , 



UNCLASSIFIED 

UNCLASSIFIED 


be 



UNCLASSIFIED 

NON-RECORD 




UNCLASSIFIED 

NON-RECORD 


n 

Were the calls collected on the DCS-3000? If so. we can give you and the attorney's office a CD with an MS Excel 
Spreadsheet with the call records and hypertext links to the corresponding cell site maps. 





— oriflinal MfSiiBflf!— , 

From: | fc WF) (FBI) 



Can we download a number and its information from the tracking system to a disk? An agent 
is inquiring about this because the attorney's office said he needs the information to present to 
the judge. 



FBI-WFO 

Telecommunication Specialist 
15-2 

M I 


UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 



J(WF) (FBI) 
L2flflS,12;31 PM 
l.fOTDWFBn 


kOTD) (FBI) 

J006 12:04 PM 
JVF) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I think it best if someone from your office reolie si I s asking if your office enables the | ~ 

for each pen-register (criminal and FISA) target as a matter of policy/practice. The d efault An we UL. 
allow the digits dialed by the target after the call is setup unless the check box calle d 
for ea ch target. I iust checked vour criminal DCS-300Q system, and the vast majority are set to "N", ' 
you'rel ^^Tfor the maj 








Importance; High 



UNCLASSIFIED 

NON-RECORD 



□ lease forward to all TS/TA's for a response. 

Ladies and Gentlemen, 

Can everyone please send me a ,ve,[y ShQtLxeOQnas on the PfacticejffliOffifiSS foUowS in the U 86 Qf the PCS- 152 
3000. Do you ONLY capture the l I l57j 


Since there are many options available to us on how much dialed information we collect we need to know what the 
norm is around the country. I understand that some of you vwll answer it is on a "case to case" basis, but I am just 
looking for the norm in your office. 


Thanks for your quick response. The legal guys need this information to talk to all the options the DCS-3000 
allows. 


□ 



Personnel Development 


UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 

UNCLASSIFIED 

SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
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SENSITIVE BUT UNCLASSIFIED 




b 6 

b7C 


Subject: 


l^rei)^ 


— 

bi] (FBD;|_^ ^ 

saiEsJ honi-fflT?i 1 


jLAUFBnj 
l(HO) (FBI)I 

Vba\ (m 

ImO) (FBI 

KCV) (FBI);| 

UK) 


UNCLASSIFIED 

NON-RECORD 


All. 

Please 

— Original Message^^_ 
From; I 

Sent: 

To: 

Cc: 


I below and respond directly back to him as soon as possible. Thanks! 


□(OTD) (FBI) 


2006 8:14 AM 
toTDKC OlM) 


|oTD) (FBI) 


](OTD)(FBI)i_ 


piliUl-BDL 


"bTD) (FBI)I 


(OTD) (FBI)I^ 




UNCLASSIFIED 

NON-RECORD 


b 6 

I b lease forward to all TS/TA's for a response. 

Ladies and Gentlemen, 

Can everyone please pnd me a very short reoonse on the practice voor offices follows in the use of the DCS-3000. Do ^2 
you ONLY capture th ^ | jb 7 e 

Since there are many options available to us on how much dialed information we collect we need to know what the norm is 
around the country. I understand that some of you will answer it is on a "case to case" basis, but I am just looking for the 
norm in your office. 

Thanks for your quick resoonse. The legal guys need this information to talk to all the options the DCS-3000 allows. 

b6 

I I t7C 


ss>T“ 


VechnicaH 


0 :£ 

C;20: 


Per sonnel Development Unit 

□ 


b6 

b7C 


UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 



UNCLASSIFIED 

NON-RECORD 



UNCLASSIFIED b6 

NON-RECORD b7C 





UNCLASSIFIED 

NON-RECORD 


S^T 


o 


Some of this information is third hand so it might be a little distorted. 
JUisJodiaLLwas told; 


(S) 


bl 

fo2 

b6 

b7C 

b7E 


I I contacte d “"S tating a line was running ooen l b tated it was for i j 

I t racked it to a modem that was not working property. The modem is dialing out, can't connect, hanging up and 
redialing. This has been occurring for a week now. 

This Is my researchi 

I looked at this modem. It is moderri number # 6. It 
F# F2077020. 

According to our records Norfolk was calling this modem to connect to the DCS 3000 system. If this has changed 
then I am not aware of this. 

Based on the above I looked into the multiserver and could not find a switch 
machine. ^ 

I looked on th| nultiserver and found th ^ Switch but it was not checked. 


dt j [ n 


the Cisco 2600 series machine with 


m th^ 


hooked a digit grabber to the rhoc^m and determined the number being dialed i^ 


know what this is?? I don't. 

I searched this in our database at 


ind came 


Do you 


(C) 


up with nothing which probably means that we did not order this line. 


Can you look into this and determine what this modem was being used for? Is it still needed? Can we power It 
off?? ' 

for your help. 


b6 

b7C 


UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 
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|(«TD) (FBI) 


From: I If lTD) (FBI) 

Sent g - 

sCbject: *FW; FISA Pen Register Bate 


S H S S 


Pen register data Ji scuglon 
for FISA rel... I 





UNCLASSIFIED 

NON-RECORD 


Results fromr 1 1 ^ if (5 KB) 


SENSITIVE BUT 


Any ideas? 


be 

fo7C 


'^=M3r iginal Message 

Fromi l i mm (FBI) 

Se nt; Wednesday, Ju ly 07, 2004 1:44 PM 

To:| KITD) (FBI)i |(rTD) (FBI),! 

m ^ 

Cei l i rrrm (FBI) 

Subject: PW: RSA Pen Register Data 


] (UD) (FBI); I ~l (rTD) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Guys, 


be 

b7C 


The question continues to pop-up, how does the field handle FISA information; classified, or 
unclassified? Can we develop a procedure regarding the proper handling and transfer of data thru 
the DCS-3000 One Way Push into the 3094? Or use an alternate approach? 


^ Apps. t hi 


lentioned the possibility of using EDMS for each region and automajically download the Tel 
is may be a viable option? More details will be need for a discussion. 


Other suggestions? Any way to provide the field with an answer? 




original Message— 


□ (ITDHFBI) 


Sent: Thursday, May 27. 2004 2:35 PM 
To: | r iTD) (FBI)f“ 

Subject: 


](ITD)(FBI) 


bo 

b7C 




e 9 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED 

~I<0TPMFBI) 

From: I l lOTD'i (FBI) 

Sent: Thnrsriav 9nnfii nnPM 

To: I (FBI) 

Subject: RE; IT Information Request - Needed Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


n 


— Original Message— 


](OTD) (FBI) 


be 

b7C 



](OTD)(FBI)n 


3:o™) (CON) 


Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 

The cost of the hardware, software, and the development work for the interface to the Trilogy network or other FBI IT b 2 
infrastructure for the DCS-3000 system is approximately $750,000 per year. The majority of this cost is for hardvyare be 
(e.g. routers and other networking e auiomenty The DCSnet c osts are approximately $500,000 per year if you includeb7c 
the IP service contract we have with | l ean elaborate on this topic if needed. b7 e 

□ 

— OriginaMJJ^gge;;;;- 


S0TOET 


SENSITIVE BUT UNCLASSIFIED 
N ON-RECORD . 


be 

b-7C 


be 

b7C 




oni — r 


[ 

This is tied primarily to future requests for money, 300 exhibits and requisition in FY07 and forward. However, the 
cost of each system should be looked at so we can determine our investment and support needs that are truly IT. 
We would like to know the cost of the part of each system that is IT (that allows our collection systems to connect 
to trilogy, operate remotely over an IT system, prepares data to be sent over/to an IT system). 

I know this Is a little vague but we need an estimate with some basis behiond it 

I 1 be 

fo7C 


— Original mpbcwip — 

From: I t OTD) (FBI) 

Se nt: Wedn e^av-T^arch 22, 2006 9:14 AM 

To ! IT QTD-) (FBI) 

Subject: RE: IT Information Request - Neeoted by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I Itic 


. J TICTU personnel have asked that you specify what time period you are inquiring about as well as 
aenning what you consider IT to be. Are you asking about costs from the inception of projects that could date 
back years, or something else? Thanks. 


Telecommunications Intercept and Collection Technology Unit (TICTU) 

Electronic Surveillance Technology Section 

Operational Technology Division b 6 

Quantico, Virginia h7r 

703 i 



Subject: 


Hessaos;::;: 

I Irn-m^ (FBI) 

Tuesday. March 21. ?n06 4:11 PM , , 

I m um i 

IT Information Request - nieeoea oy rnoay J/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 




Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems 
listed on the OCIO master list of systems, applications, databases, and networks. For the 
systems/projects listed below, please determine or estimate as best you can the cost of the hardware, 
software, and the development work for the interface to the Trilogy network or other FBI IT infrastructure. 
This will help us separate the funding of National Security Systems that are not truly IT from IT systems, 
databases, applications and networks. Please provide an estimate by Friday 3/24. 

EDMS - IT Interface 
DCS 6000 - IT Interface 
DCS 3000 - IT Interface 
DCSNet (CALEA transport) 

CARTSAN - IT Interface 
CART Family of Systems 

293 



fo2 

be 

b7C 

b7E 


SENSITIVE BUT UNCLASSIRED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIV E. BUT U Jj l C I-ASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


Central Monitoring Piant Network 

Central Monitoring Pla nt Systems Operations Center (CSOC) 


Thanks, 

I Ip e. pmp 

Electronics Engineer, Program Menagement Office Manager 
ELSUR Management Technology Unit 
Electronic Surveillance Technology Section, OTO 
Phone: 703[ ' 

Cell: 

Fax: 


SENSITIVE BUT UNCLASSIFIED 


lOTD) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


3tD) (FBI) 


Jhiirsdav. Mart;h2a. 2006.8:56 am 




](0TD)(FBC 


iSFly 

:OTD) (CON) 


□ (0TD)(FBI)[; 


FW: IT Information Request - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


end I will gather 


To All, 

Due to the move, please provid d I wth all submissions no later than 3pm today. [ 
the data to send it to the front office later this afternoon. ' 

]- the DCS-6000 does not connect to trilogy, operate remotely over an IT system, or prepares date to be sent over an 
I. But, how it relates to DCS-NET may be a different story. So as not to duplicate numbers, if there is an IT cost 
for the 6000 and DCS-NET, can you include that number (and notation) with your estimate? Thanks. 
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fTD) (FBI) 

Brmeh?3 2006 9:14 AM 
r P)(FBl) 

rormatitHi Kequest - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I IICTU personnel have asked that you specify what time period you are inquiring about, as well as defining what ^7 

' you colisider IT to be. Are you asking about costs from the inception of projects that could date back yeais, or 
something else? Thanks. 


supervisory Spea'al Agent 

Telecommunications intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 


JOTD) (FBI) 

2flQ64:llPM _ 

— " ' ^ t OTDHFBII J 
uest - Kieeded by Friday 3/24 


tOTD) (FBn r 

llTDt fFB lH 

MUJ ' ' l lTD) (FBDT 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems listed on 
the OCIO master list of systems, applications, databases, and networks. For the systems/projects listed below, 
please determine or estimate as best you can the cost of the hardware, software, and the development work for 
the interface to the Trilogy network or other FBI IT infrastructure. This will help us separate the funding of National 
Security Systems that are not truly IT from IT systems, databases, applications and networks. Please provide an 
estimate by Friday 3/24. 

EDMS - IT Interface 
DCS 6000 - IT Interface 
DCS 3000 - IT Interface 

DCSNet (CALEA transport) b 2 

CARTSAN - IT Interface b 7 e 

CART Family of Systems 


CART_Fam|v 
Central Moniti 


Monitoring Plant Network 

Mnniforina p^nt Systems Operations Center (CSOC) 


SENSITIVE BUT UNCLASSIFIED 






NON-RECORD 



fc .2 


b7E 


□ 


We are still missing crucial information on this FISA and with what little we have we cannot write a renewal. I am 
hoping that by providing you these questions that you can see how vital information is being lost. 



be 
bvc 

UNCLASS IFIED 

UNCLASSIFIED 

UNCLASSIFIED 



[ 


From: 

Sent: 

To: 

Cc: 

b6 

Subject; 


tOTD) (FBI) 

I H inyiifbii 

SMS ini 



J(NY) (FBI) 


llQIDWFBI) 

JNY) (FBI); 


Importance: High 


b2 

bVE 


SECRET//NQFORN 

RECORD 321C-NY-229487 sub KKK 


Guys, I I b7E 

I hav e attac hed a couple of telephonvjadiu outs from i I It s.eems on the ceil phones when the pen data is 

pushed intcljand it is a SMS message ! I doesn't always interprets it correc tiv. It appears as HEX data. The other 

problem is it is a 0 second session and it doesnl always show up a s a D fdate > in j E ither. Take a look at the 
attachment. The first three are from the same phone, I believe it i a l and tns rfiessage did not come through. The 


29B 


SEI 






DCS-3000 caught it correctly. The last one, I Idid catch the message, but it also put HEX data In as well. This is 
definitely a problem. »— J 



Another problem I just noticed is that on some of the cell phones we are getting dupiicate sessions! Iwhat I 
in is it will appear as below; I I 


The difference is on the one with the Contact ID, if you hit playback the session only lasts about 1 0 seconds and is just 
buzzing noise. The second call actually has the 4;55 audio. This is causing a lot of confusion. I have seen it on several 
cell phones. Any ideas. I getting overwhelmed with this stuff. Thanks. 






SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


S ') (FBI) 

9:00 AM , 
ro TD) (Fan:! 
BI 1 

qn(FBIV, 1 

testing 


Guys, 1—1 

We have being looking at the cell phones from the DCS-3000 that we put int q I for CDC. It seems to be working 
well with two minor issues. One is that it changes the description in the playback field from V to D every time because of 
the CDC message. Not a big deal. The second issue is every time we get a CDC message there is a 0 second session 
that follows the call. It is some where between 30 seconds to 2 minutes after the call. We looked at some of them and it 
looks like it is some kind of message release signal being sent down the line. It is happening on all the celt phones, not 
just specific companies. Any ideas for fixes? Thanks. 


hlVo Souad SO-T 
work; 21 21 
cell: 9171 


SENSITIVE BUT UNCLASSIFIED 


L_____J(NY) (FBI) 
Thursday. April 27. 2006 4:45 PM 

1 

RE: Old DCS-3000 box IP 


SENSITIVE BUT UNCLASSIFIED 
N ON-RECOe D. 


jiks. I am Qoir iQ on v acation tomorrow an d will ht> m 
I just spoke td land you guys will walk| pi 


out for a week, s q , 
Ihrough the setup or tne 


Vou n^ to run a Ca ts cable from tj 
the box so it can do pen data for the I land tha 

Thanks. ' ' ' 



NYO Squa< 
work: 212 
cell: 91 tT 


s™et 


From: » (fbi) 

Sent; JHui5d?i2jMUL 2006 7:53 AM 

To: CZZZZInY) (FBI) 

SuBiect: RE: Old DCi-3000 box IP 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


The box has already been sent. We carried it over to the shipping people yesterday after lunch. Hopefully they got it 
sh ipped to y ou overnight and you should receive it this morning. Are you going to collect the pen info for this target on 
th d I client? Are you going to collect both interconnect and PTT on the same box? Let me know and I wrill make 
sure the client is set up properly for that. 


— Original Message — 

From; | |NY) (FBI) 

Sent: AhnI Jfi . 200fi 5-54 PM 

To: ■ l(f>Tn)(cnt) 

Subject: Old DCS-3000 box IP 
Importance: High 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


J~~~i'he old PCS-3000 box i s running windows j | and has the following IP address: 


ib2 

lb7E Are you guys going to be able to send me al box? Let me know. Thanks. 


NYO Squad ^ 
work: 2ll 

cell: 91 TT 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 





(NY) (FBI) 
00611:29^ 
3\ (FBn: 
NY) (FBI) i 


SEgRpWg£g§N 
RECORD 32iaiiY-229487 


I attached the RMS for the I Ih nx | will coordinate with our CMP to get the pen data from th£|[ 
the IP from the old DCS 3000 and make sure it is still connected to file DCSNet so you can send the pen 
phone once we get all the info. Thanks. 



Original M^agg;;;;;; 

From: I l OTD) (FBI) 

Sent: Monday. Marrh 77. 2006 1:06 PM 

To: I ~ NYI (FBI) 

Subject: RE: Needed information regarding Manhattan POTS lines 


RECORD 321C-NY-229487 


We had hoped to come up on Wednesday. Did you get the IP address for your new DSL connection? 


— Original_Mega( 

From: I K yI (FBI) 

Sent: Mgnj^y March Z7. 9:20 AM 

To: I D TDI (FBI) 

Subject: RE: Needed information r^arding Manhattan POTS lines 


RECORD 321C-NY-229487 


It is my understanding that we do act as a proxy with delivering thei 
they do a lot more surveillance then we do. I will get someone from the 
up the equipment for the OCS-3000 move. When are you coming? 


rs. Tha poesthat. However, 

iown hef^men you guys come to set 


-““Original Messag^;;;^__^^^_^_^ 

From: I l OTPl (FBI) 

San t: Frid ay. March 24, 2006 4:52 PM 

To: I I nYI (FBI) 

Subject: RE: Needed Information regarding Manhattan POTS lines 

SECREiwePOgR 
RECORD 321C-NY-229487 


Does ! h o intercepts witho ut court o rders? I thought we act as a proxy foi l I That is, we serve the 
phone company the order for thd [ targets. If so, there should not be a proble m: the DCS-3000 can 
direct all FISA t raffic to the l K vstem. If not, then we can segregate th i t raffic from our traffic by 

niwinri k eoarate telephone numbers for i land Bur eau to deliver the CDC data. For example, 

I haroets' CDC data can be delivered toj |the FBI's targets' CDC data can be delivered to 


— Original Mes 

From: 

Sent: 


I I (NY) (FBI) 

■FridflY. March ^412006 1:56 PM , 

I HfOTPl (FB1)| 

FW: Needed Information regarding Manhattan POTS lines 
High 


SEeRET/ZNOFORN 
RECORD 3210^-229487 


303 



Subiect: RE: Needed information regarding Manhattan POTS lines 


I I III IKIIIII IIIITF b6 

RECORD 321C-NY-229487 b7C 


It is my understanding that we do act as a proxy with delivering their orders. The l b oes that. However, they do a lot 
more surveillance then we do. I will get someone from the | fc lown here when you guys come to set up the equipment 
for the DCS-3000 move. When are you coming? 



RECORD 321C-NY-229487 


be 

b7C 


Does I T do intercept s without court orders? I thought we act as a proxy foi H l lhat is, we serve the phone 
company theajjfor for th el t argets. If so. there sho uld not be a problem; the DCS-3000 c an direct a ll FISA 
traffic to the l b vste m. Knot, then we can segregate th d t raffic from ou r traffic hv g ivin d I seoarate 
telephone numb ers foi fe nd Bureau to deliver the Coci data. For exam ple.l I taroets' CDC data can be 

delivered to 2t2 H I the FBl's targets’ CDC data can be delivered to 21 j | 


b2 

b7E 


IriYHFBI) 

J0p61;56PM 

□ (OTO)(FBI)C 


FW: Needed information regarding Manhattan POTS lines 
High 


SEI 




Did you ever receive the equipment sent to you a couple \veeks ago? 


Thnx, 

-ca 


b6 

b7C 



Subject: Movement of NY 


SENSITIVE BUT UNCLASStFIED 
NON-RECORD 


] (OTD) (FBn i h v) (FBI) 


b2 

b7E 


Guys, 

I got word today that ou 
3/27 to move our DCS-3000 


and pu! 


_Jine should be in 
pushing the info ini 


I think you can plan on coming up to NY the week of 
.et me know which date works for you. Thanks. 


be 

b7C 


'NYUyquad^ 

work: 21^ 

cell: 9171” 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


"I (OTD) (FBI) 


!1nY){FBI) 

5:37 PM 

| (OTD)(FB»C 


I -JnY) (FBI) 

Movement of NY DCS-3000 


□OTD) (FBI);f 


be 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Guys. , , 

I got word today that oullline should ha in nn 3/23. I think you can plan on coming up to NY the week of 3/27 to 
move our DCS-3000 and pusnmg the info intol Let me know which date works for you. Thanks. 


' Nvubfluad SL Fr* 
work: 21 2J I 

cell; 917£__^^ 

be 

b7C 


b2 

b7E 



312 


SE0RET 




I just spoke with | [ Everything seems to be in order. We'll see how this thing works on 

the cluster ring ... . I 

Tentatively speaking, week of 27Feb. We'll give a definite date after I speak with! Ito 
check his schedule. * * 


be 

b7C 


Thnx, 

-ca 




REj^^Jxirade at 


| NY)(FBn 

/, Febmarv 15, 2006 U:2fi,ata_ 
□ (OTD) (FBI);| 




jSy) (FBI)C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


(NY) (FBI) 


be 

b7C 


fc2 

b7E 


be 

b7C 


get some of the answers for you. I t s o 


I am forwarding this message to^ _ , 

Vacation till 2/2 0, TheDCS-30p 0 is now in the Shield. It is probably about 150-200 feet between the 
DCS-3000 and| I What we can do is run a longer CATS fr om the port and move the DCS- 



3000 closer to I p you can order two 50 ft cabl es.l i s in NJ. What wt> wiU r>rf>hah(M 

Q is pat an additional DCS-'^nno for our NJ Site where ! 1 §7 We can create t 


get the info out there. Also, it would make go^ sense to have a DCS-3000 out there for 
irposes. You will need a 50 ft. cable for out there too. 

li be ordering a static DSL line into the Shield in the next couple of days. I got authorization to 
put it under our covert Title III account. 

Thanks for the help. 


c 


NYO Squad SOjl 
work: 
cell; 91 


□ 


—Original Message^^ 


TjtD)(FBI) 

Ts, 2006 8:46 AM 


Wednesday. F^njar 

J KNY^rFBp 

I . . iltms) (FBpf 

FW | [ upgrade and CALEA 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


be 

b7C 


hC 


J[NY)(F 


In preparation for the One Way Push installation I'll need to know what length serial 
cables are needed. 

Typically, we install the Lowside Server into the OCS-6000 rack and the HiSide 
Server into tha_jack. We then connect the two servers vi a serial cable With that 
being said, howTnarty One Way Push systems are required . I 

or all? How many DCS-6000 systems do you have - three like the l ^ nd in the 
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9 © 

same locations? Do we have the rack space In the DCS-6000 for a 2U Serv er, or if 
we are required to put mor e than o ne in a rack? Do you have enouq l b orts 
availab le on the DC S-6000 1 T witch for (3) servers? Do you have one free port ^ 
on eac H fewitch? What length s^ al cable is required to go from the DCS- 

6000 rack t d D o you have enough UPS ports and power 

to handle the additional equipment? Three servers use 750W and the other three 
servers use 1 SOW. Please let me know so that I can get the cables made to size. 
Usually we use 20ft, 35ft, and 50ft denomonations. Please call if you have any 
questions. 

Thnx, 

I I be 

703 j n 

— Original Mp««pno — 

From: (MY) (FBI) 

Sent: niursdav. January 26 . 2006 9:03 AM 

To; I IfOTD ) (FBI)J KOTO) (FBI) 

^ I I° ~rD) (ran 

Subject: Kb | | upgrade ana caleA 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


fo6 

b7C 


I know you are avoiding me. The sooner the better. We will start with theJ^S-3000 targets 
first Once we get those working, we will start on some CALEA T-1s. I have the l Jp iaking a list for 
me regarding how many targets come from each CO. We will start with the bioa^tcentr al Offices 
first and then go from their. Once I have some numbers I will let you know. | |is the TTA in 

chargeof the DCS-3000 here if you have any questions. Talk to you soon. ' ' 


□ 


— Original Message™ 


f OTD) (FBI) 

/. Januan/ 25. 20D 6 «;:Tn pm 
WY)(FB1)| 


Subject: R^^^Tpgrade and CALEA 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


!TTFBir 


be 

b7C 


□(OTD) (FBI) 


b2 

b7E 


I 1 

I spoke wit H i todav and he has already discussed F I ssues 

and concerns at length. We discussed some possible system configurations, 
implementation approaches, and pilot testing. Upon my return to ERF, we will 
complete our configuration prepa rations, p erform tab tests to verify operational 
performance, and will prepare for | l installation. More details to follow. If 
you have any further questions, feel free to give us a call. Hopefully, mid to later- 
part ofFeb2006? 


Peace Out, 
-ca 


SE^T 


315 


PS - We aren't avoiding you, just stalling for opening day at Yankee Stadium... 




](NY)(FBI) 

— 2008 9:17 AM 

(OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b2 

b7E 


foe 

fo7C 


Jhould allow us to do CALEA now, correct? I war^_ 

my office to push all our FISA from the DCS-3000 lntc | | 
Let me know when we can do this. Soon is better than later. 


I think a vacation in NY for a couple of days is just what you need. What do you think? 


* NVOtjquadSO- ? 

work: 2 124 I 

cell; 917 | | 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
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b2 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Sounds great. Whatever you need let me know. 

he 
bic 


— Original Message 


□(OTD) (FBI) 


Djary 15, 20 06 2:31 PM 


t0TO)(FBI)[^ 




JNY) (FBI),-Q 


3nY) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b2 

b7E 


b6 

b7C 


I just spoke Witt ] | Everything seems to be in order. We’ll see how this thing works on the 

cluster ring ... . ' I 

Tentatively speaking, week of 27Feb. We'll give a definite date after I speak with! Ito check his 

srhr>rliil(a ■ * 


Thnx, 

-ca 


be 

b7C 


■-—Ori ginal Message — 

From: 1 r NYI (FBI) 

ruarv lS. 2006 11.16 AM ■ 

lOT DI (Fei);|_ bmmi) 

l (OTD) (FBI)] lim (FBI)r 

andCAlEA * ‘ ■■ 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



JnY)(FBI) 


b2 

b7E 


I am forwarding this message to I I to get some of the answers for vou i b on Vqj 

a The DCS-3000 is now in the Shield. It Is probably about 150-200 feet between the DC& 

. What we can do is run a longer CATS from the port and move the DCS-3000 closer to T , 

you can order tw o 50 ft ca bles i I s in m i wha» wo ««ii nmhahh/ nooH to do is get an additional DCS-3o6o for 
our NJ site whereL—ZJ- We can creat d b get the info out there. Also, it would 

make good sense to have a DCS-3000 out there for contingency purposes. You will need a 50 ft. cable for out 




be ordering a statici line into the Shield in the next couple of days. I got authorization to put it 

317 


b2 

b7E 


under our covert Title III account 
Thanks for the help. 

work; ?1 ?I I 

cell: 917 j | 



— Original M ^qe — 

From: I T OTP^ (FBI) 


iWednesday, February 15, 2006 8:46 AM 
SoTD) (FBdC 


Ipgrade and CALEA 


3 nY)(FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


€ 


Hi 


IZZI 


II need to know what length serial cables 


In preparation for the One Way Push installation I' 
are needed. 

Typically, we install the Lowside Server into the DCS-6000 rack and the HiSide Server into 
the I | rack. We then connect the two serv ers via serial cable. With that being said, how 
manyUne Way Push systems are required - I "t r all? How many 

DCS-6000 systems do you have - three like th d l and in the same locations? Do we 
have the rack space in the DCS-6000 fo r a ?U s ervar or if we are required to p ut more 
than one in a rack? Do you have enough! lorts avail able on the DCS-6000 | | 

switch for (3) servers? Do you have one Imu pJil on ea chl Iswitch? What l^ qth 

serial cable is required to go from the DCS-6000 rack to | Do 

you have enough UPS ports and power to handle the adamonai equipment? I hree servers 
use 750W and the other three servers use 150W. Please let me know so that I can get the 
cables made to size. Usually we use 20ft, 35fl, and 50ft denomonations. Please call if you 
have any questions. 


Thnx, 




al Messj^ 


l (NY) (FBI) 

ur^a« lamiarO j>R 7006 q.nt AM 
rOT D) (FBI);' 


J(OTD) 

tELJpgradt 




J(an>)(FBi) 


SEN SITIVE BUT UNCLASSIFIED 
NON-RECORD 


fob 

b7C 


Tknow you are avoiding me. The sooner the better. We will start with th e DCS-3000 targets first 
Once we get those working, we will start on some CALEA T-ls. I have th el I making a list for me regarding 
how many targets come from each CO. We will start with the bigge st CentraToffice: " 
their. Once I have some numbers I will let you know, 
if you have any questions. Talk to you soon. 


ffices first and then go from 
the TTA in charge of the DCS-3000 here 


b2 

b7E 
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be 

b7C 




SE^ET 


fo6 

fc7C 


Q 


[OTD) (FBI) 
Sr725, ?nnfi «;'^n pm 
IfNY^ fFH ^ 


■_, ToTfluFan 

RELJjpgrade and CALEA 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


](OTD) (FBI) 


be I 
b7c] 


I Spoke today and he has already discussed F i issues and 

concerns at length. We discussed some possible system configurations, 
implementation approaches, and pilot testing. Upon my return to ERF, we will complete 
our configurati on prepa rations, perform lab tests to verify operational performance, and 
will prepare fo j I installation. More details to follow. If you have any further 

questions, feel free to give us a call. Hopefully, mid to later-part of Feb2006? 

Peace Out, 


PS - We aren't avoiding you, just stalling for opening day at Yankee Stadium... 


al Message — 


JNY) (FBI) 

— - ’fl, 2006 9:17 AM 
l(OTD)(FBI) 
|OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


be 

b7C 




'tie u pgrades we just did on j S hould allow us to do CALEA now, corr ect? I want I ^ o 

work with i I in my office to^sh all our FISA from the DCS-3000 inte f | and see how li 

works. Let me know when we can do this. Soon is better than later. ' ' 


I think a vacation in NY for a oiuple of days Is just what you need. What do you think? 

□ 


NYO Squad SO-1 


work: 

cell: 




SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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I 






SENSITIVE BUT UNCLASSIFIED 


e 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 

I i^QTm fFBn 


Sent: 

To: 

Cc: 

Subject: 

Importance: 


b6 

b7C 


I H iNYI (FBI) 

Wednesday February 1 5. 2006 1 1 : 26 AM 

^ 10Tp2|FBI)C^ 




(OTD) (I 

W) 

ipgrade and CALEA 


High 


IfNY) (F^ l). 


[NY) (FBDj 


] 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I am forwarding this message to | 

The DCS-3000 is now in the Shield. It is probably aboul 


wecai 

cables 

can 



To get some of the answers for you. i t s 
Jt 1 50-200 feet between the DCS-300n anj 
the port and move the DCS-3000 closer tol 
‘ ibly need to do is get an additional DC^ 


covert Title III account. 


get the info out there. Also, it would make good sense to have a DCS-3000 out 
need a 50 ft cable for out there too. 

a fo6 

line into the Shield in the next couple of days. I got authorization to put it under our 


Thanks for the help. 


b2 

b7E 



NON-RECORD 

foe 


Hl | I 


b7C 


In preparation for the One Way Push installation I'll need to know what length serial cables are 



320 


needed. SE^^ET 

Typic ally, we install the Lowside Server into the DCS-6000 rack and the HiSide Server into the 
I I rack. We then connect the tv yo seryere yia serial cab le. With that being said, how many One 
Way Push systems are poiiifed i 1 or all? How many DCS-6000 systems do 

you haye - three like the l l and in the same locations? Do we haye the rack space in the DCS- 
6000 for a 2U Seryer, or if we are req uired to p ut more than one in a rack? Do you haye enough 
I borts aya tiable on the DCS-eOP d U itch for (3) seryers? Do you haye one free p ort on 
each I [switch? What length serial cable is required to go from the DCS-6000 rack tc j 

I i Do you haye enough UPS ports and power to handle the additional 

equipment? Three servers use 750W and the other three servers use 150W. Please let me know 
so that I can get the cables made to size. Usually we use 20ft, 35ft, and 50ft denomonations. i 
Please call if you have any questions. \ 


|NY)(FBI) 

2006 9.03 AM. 
Ito)(F8I);r 
“^T0)(fST 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


[know you are avoiding me. The sooner the better. We wilLatart with the DCS-3000 targets first. Once we 
get those working, we will start on some CALEA T-ls. I have thel Imaking a list for me regarding how many targets 
come from each CO. We w ni start with th e biggest Central OfficesTmt and then go from their. Once I have some 
numbers I will let you know. | is the TTA in charge of the DCS-3000 here if you have any questions. Talk 

to you soon. ' 


— Ori oinal Mes 

From; 

Sent: 


i (OTD)(FBI) 

25, 200 6 5:30 PM 

1 (FBOr 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I spoke withi [today and he has already discussed F l issues and concerns at 

length. We discussed some possible system configurations, implementation approaches, and 
pilot testing. Upon my return to ERF, we will complete our confi guration preparations, perform 
lab tests to verify operational performance, and will prepare for j h stallation. More 
details to follow. If you have any further questions, feel free to give us a call. Hopefully, mid to 
later-part ofFeb2006? 
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PS - We aren't avoiding you, just stalling for opening day at Yankee Stadium... 

b6 

— Original 

From: I (FBI) 

Sen t: Wednes day. January 18, 2006 9:17 AM 

To: (FBI) . ,, 

Cc:l TbTD) (FBI) ^ 

Subject: |_Jipgrade and CALEA 

SENSITIVE BUT UNCLASSIFIED 

NON-RECORD fo2 

b7E 


be 

b7C 


ThfliinnrariPfi we Just did onl Ishould aliow US to do CALB 

I l ln my office to push an our FISA from the DCS-3000 in 

wnen we can do this. Soon is better than iater. 


[hink a vacation in NY for a couple of days is just what you need. What do you think? 



SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
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K NY^ (FBI) 

September 5q„ 2005 4|48 PM . 


aswnile.gif (2 KB) I i Bkard.alf 


We did a test call the other day with the Case Agent and we are onl y getting one side of the 

conversation. We monitored the call as it came in here and at the | | Can you get a hold of | I 
and see if they have provisioned it for both sides of the conversation. I appreciate the help. 


— Ori ginal Message — 

From: ! "l OTD) (FBI) 

Se nt: Friday. Septem ber 23 , 200 5 12:15 PM 
To ^ (NY) (FBI); ] 

Subject: RE| Cell phone Coverage 


■ b7C 

] (NY) (FBI) b7E 


I looked at your DCS-3000 system and found pen-register data for the target as late as yesterday. 

However, there were no "CCOPEN" or "CCCIose" mes sages in t he pen-register data, which 
suggests there's either a problem with the 'dial-up' line or l h as the interce pt provis ioned for 
pen only. I called the 'dial-up' line from h ere and it answere d. So, it looks like a l I 
provisioning problem. I left a message fo| |the court-order manager at I | 

and I'm waiting for her return call. i— — — — i 

b2 

Also, whe n I called the 'dial- up' line I did not get th e tone that we us e with our Harvest Moon ^ ' 
system foi l I calls. So, I assume tii d h umber is a simple POTS 

analog line. If so, please note that you may not get all intercepted calls in the clear, if you wish, 
we can help you remedy this problem. Just let me know. 
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|(OTD)(CON) 

£tober06, 


Follow Up Flag: 
Due By: 

Flag Status: 


^/ F 5h: l ^ 

Spend Code Descriptions 

Follow up 

Wednesday. October 12, 2005 12:00 AM 
Flagged 


ETDnFBl): 
](OTD) be 

b7C 


UNCLASSIFIED b6 

NON-RECORD b7c 

In reviewing the Spend Plan's descriptions with! lit hos been determined that FV06 will bring about several 
changes that may not be reflected in the current write up. In order to realign the mission goals/objcctives, please 
review the current write ups to ensure that it is aligned with FV06 tasks. 






Ex: SBIT should include TMD , DCS-NET, Outreach Conferences, DCS3000 Upgrades. 
If these items align with major tasks for Fy06, consider including them in the write-up. 


These adjustments will provide a more accurate occount in our Spend Plan and will be used 
the Ab and in my quarterly submission to SftU. 


in | ‘j jni 


If you should have any questions or concerns, please see me or 


1 b6 

b7C 

H I 


□ 


UNCLASSIFIED 


[ 


Tiotdkfbii 


From: 

Sent: 

To: 

Cc: 

Subject: 


UNCLASSIFIED 

NON-RECORD 



](AL)(FBI) 


□ 

I spoke tol land obtained the in formation about where to send the order. FYI, the woman's name is| I 

a j K tox). I will be sending the order right after I send this email. 

I connected our DCS 3000 computer to the switch in our rack here in the RA which has the I bquipment hook-up. 

t The following information appears on the switch: * * fol 

1 I 

b7E 


Hopefully that info gets you into the computer. The username that came up when 1 fired up the computer was DCS3000 
admin. I tried logging on with no password but that did not work. Is there a generic PW that we use on these terminals? 


The target phone number in our case 
from the date filed. 


^ The order was signed^ 


] 


I ^ id to go ah ead and talk t J k get the network connection established and as soon as she is satisfied with 
the order, she will tel j ^ o start sending data. 

Just to let you know, I submitted and RMS yesterday on this sulqect if you want to close it out The number is 106877. 

After reading the or der. I noticed it is also an order for th d b hone of the target which i d I vith 

I I Do you have a POC there where I can send b court order to get the ball rolling on that as well. 


Do you need me to fax you a copy of the order for any reason? 

I have not been to training on DCS 3000. Can you remind me how we upload the data we recieve to Telephone 
applications or send me any instructions on how the system works. 




J(SE) (FBI) 
OflAAflS PM 
I(ITD)(FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Why does , I come back with no record in the DCS-3000? This came up on our 

Inn rails today It is in Atpyanriria VA. Even the lAP check came back with nothing, I thou ght you 
guys had the DC area pretty well blanketed. Should there have been some info regarding thid lin the DCS- 

3000? ^ ' 


SENSITIVE BUT UNCLASSIFIED 


From: toe | |(SE) (FBI) 

Sent: b7C Thursday Anril 1fi .?n(M 1 , ?a PM 

To: I I (ER) (FBI) 

Subject: RE; DCS-3000 Comments 


UNCLASSIFIED 

NON-RECORD 


Okay, we'll keep the sector offset thing in mind. Maybe the program could be modified in the future to make that 
adjustment for us? 


A couple of other tNnns I nntirarl test night on our newest caper. We didn't actually get any cell site hits on this one, but 
I was trying to shovJ now this thing works, I noticed a coupie of bugs. 




I know I'm being kind of a pest, but please bear with me and don't filter me off of your email. Thanks. 


b2 

b7E 


Seattle^ 


b6 

fc7C 


jqinal Message— 


i-JUUU 




ER) (FBI) 


(SE) (FBI) 
Comments 


UNCLASSIFIED 

N ON-RECORD 


Yeap. Hooked in on your system this morning. It was configured for a 6(1 
click on Configure and set the offset to 0 degrees. That should work with|_ 
I [target, just set it to 60 degrees. 


O 


— Or iginal Message — 

From: I | (SE) (FBI) 

Se nt: Wednesday, April l4, 2 004 11:58 AM 
To| ^ER) (FBI) 

Su bject; Rb: ULb-JUUU ' Lorfi rnents 


be 

UNCLASSIFIED 

NON-RECORD 


b2 


Than ks for the repiv. l I Regarding the l B ata yo u have reg arding tha ti l this was 

I teweredealina with Andtheinfatmation weaotfromr"' fwas indeeJlHat tnel 


dthj" 








jntnal MPR<aaf»— 


ject; Rg: Pg-3000 


Her) (FBI) 


14, 2004 7:30 AM 
(SE) (FBI) 
Commente 


he 

fo7C 


UNCLASSIFIED 

NON-RECORD 


he 

fovc 


fo;;: 

b7E 


o 

Thanks for the info. Here are some of my thoughts: 


tjooked a )l l and were not impressed with the ims 

__ annot load/handle more that about 25,000 site locationj 
), we went with Microsoft. 


b2 

b7E 


of the maps or the fact 
ilone has more that 51,000 


2. There's a hook in the DCS 3000 Client softvirare that can feed i ^ or any other GPS maDD ino system 
with cell-site position information in real-time. We developed this feature to int Mrate wift our l Ivan- 

based systems. The idea is to have the DCS 3000 feed lat/long information via l lmo demtoa| | 

van. A direct connection from a com port on the DCS 3000 Client machine to a 1 T machine can be 

accomplished with a null-modem serial cable. The problem with this technique is mat it will not display sector 
information on the external mapping application. 


3. Sector information is somewhat tricky. The Tracker application has a configuration setting for sector offset. 

We had tojgu^s feature in because not all carriers use tht» samB spntnr nneitifininn convention. For 
examole j isectc^ 1 is typically centered at 60 degrees; ! j ypically centers its first sector 

at 0 dearees i h as been providing us with additional inTonmauon aoom the azimuth and beamw idth of 

each secto r. For example, the last query your systepunade last Friday at 16:50 EDT was foi ^~ I 
I ( which corresponds t o a sector c entered a ! i egrees with a beamwidth ol~heorees. I received 

and loaded an updated list of al l tell-site s on last Friday afternoon. I'm very sun^rised to hear that 

the inform ation that you received frorr l HU as different than the data that I received the same dav fr om 

One thir^Jhatcomes to mind is that maybe your Tracker application was configured for a|__JI 
degree offset (fo | 1 If this was the case then all ^e displayed sectors would have been off b w I 
degrees. 


In ttie.fui 


iture, if you are experiencing difficulty with the j j please don't hestiate to call me at 80C | | 


Oriqin^l ^i^qe--- , 

From I If SEI (FBI) 

Se nt! Monday, April 12, 2004 1:26 PM 
To i I fri (FBI) 


foe 

hnc 


i 

iUDjecb DCS-3000 Q)mi 


;ER) (FBI) 


UNCLASSIFIED 

NON-gE CO RD 




be 

fo7C 


h2 

b7E 


fo2 

b7E 


fc2 

be 

b7C 

b7E 


I | l just wanted to pass on a few commente regarding the cell site mapping function on the DCS-3000. 


First, we were using the mapping funtion last Friday (right after I got off the phone with you) on a 
kidnapping case where we were receiving information that the victim was at the same location as our cell 
phone, and that she was severely injured and close to death. We got some phone traffic, and had people 
searching the sector we identified from the DCS-3000. It was outstanding to have the location information 
immediately instead of having to spend 20 minutes getting it from the phone company. The problem was 
that your sector information was wronn whanwft had a couple of hits off adjacent cell sites, but opposite 
sectors, I got suspicious and called I i The cell loration in the DCS was accurate, but the sector 

info was wrong on both of the cell sites we were hitting. We had to send our searchers off in the opposite 
direction, having blown 45 minutes. As it turned out, the whole thing was a hoax and there wasn't really a 
life and death situation, although it just as easily could have been one. Bottom line, bad info is worse than 
no info. From now on. we are going to be treating the DCS mapping info as a head start, but we are still 
going to be calling the phone company to confirm the info. This negates one of the great advantages of 
the mapping system, but it doesn't yet seem to be at a level where we can rely on the DCS mapping info 
as a primary source. 


Given the potential utility of this system, which is phenomenal, I really think you guys should try to 
scrounge more resources for the project We should have somebody In your unit whose primary 
responsibility is the building and maintenance of the cell site data base, with frequent and regular contact 
with the carriers. This thing could really be a fantastic tool. 

One thing that is cumbersome that 1 think could be improved is the fact that you use the l 
software running on a computer at ERF, with the screen shots being transmitted out over the network. 
The problem wi^ this is that we are not able to use the features of the mapping software, such as 
zooming in or out or clicking on points to get an address, at the user terminal. We have to have a map 
book next to the terminal to overcome this. Why can't we load the software at the DCS-3000 workstation, 
and have the local software query your database? That would be twice as useful. 

As I understand it J Ita kes a big chunk of memory because it loads one giant map of the 

whole country. If weused r I we could load maps by state, which would greatly reduce the 

memory required, if that is an issue. Actually, it would be nice to use | ^ just because it is a 
pro gram that all of the T TAs already k now how to use for tracking. «bd. if th^/e i s a licensino /cost issue 
wifril |l think ! l at PSU has a huge licensing agreement wit4 [that would 

probSbiy Slldw u^ to |iut it on all of our DCS-3000 machines. 

These are some comments and suggestions for improvement but overall you guys really have put 
together some great stuff. 


b6 

b7C 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


331 



UNCLASS iaED 



Thanks for the reply j | Regarding th 

a riaalinn .i/ifh An/1 wo inf/M-matirtn 


have regarding tl^ IhiS was indeed thel Ivye 

T./OC inrlooH that I I 



— Original Message — 




j:er) (f=Bi) 


sent? 2004 7:30 AM 

To J r SE) (FBI) 

Subject: RE: DCS-3000 Comments 


foe 

fo7C 


UNCLASSIFIED 

NON-RECORD 


Kb 


□ 


Thanks for the info. Here are some of my thoughts; 


1. We initially l ooked a| land were not impressed with the image quality of the maps or the fact 

that ] Ic annot loag/nanoie more that about 25,000 site locations T p lone has more that 51,000 sites); so, 

we weritWiW Microsoft. 


2. There's a hook in the DCS 3000 Client software that can feec^ 


cell-site position information in real-time. We developed this feature to integrate wi th oil~ i an-based systems. 
The idea is to have the DCS 3000 feed lat/long information via rpiiiiiar mndpjn to a l I vanTA direct 


ipping system with 


connection from a com port on Hie DCS 3000 Client machine to al I machine can be accomplished vmth a null- 

modem serial cable. The problem with this technique is that it wiU not display sector information on the external 
mapping application. 

3. Sector information is somewhat tricky. The T racker application has a configuration setting for sector off set. We 
had to put this feature in because not all car riers use the sam e sector positioning convention. For exar nnie.l I 

sector 1 is typically centered at 60 I iypinaiiy centers its first sector at 0 degrees ! l ias 

been providing us with additional information about the a zimufo and beamwid th of each sector. For example, the last 
query your system made last Fri day a t 16:50 EOT was for| (which corres ponds to a sector centered at 

■ " - ' “■ — ' id ana isaaeo an upoated listof aiii b eiu" — 


pegrees with a beamwidth 


I b e __ 

Friday afternoon. I'm very surprisei 
data that I received the s ame day fromL 
was MioIifl,ured for si {degree offset 
offb j p egrees. ' I 


legrees. I received a 



le information that you received from|_^^_|was different than the 
pne thing that comes to mind is that maybe your Tracker appiicaHon 
If this was the case then all the displayed sectors would have been 


SEC 



b2 

b"7E 


In the future, if you are experiencing difRcuity with the I i please don't hestiate to call me at 800- 

□ 


— Or^innl Mesvinp — 

Pwimi l to (FBI) 

Monday. April 12, 

Subject: DCS-3000 Comments 


be 

b7C 


be 

b7C 


UNCLA SSIFIED 

NON-RECORD 


fo2 

b7E 


□ 


I just wanted 


to pass on a few comments regarding the cell site mapping function on the OCS-3000. 


First, we were using the mapping funtion last Friday (right after i got off the phone with you) on a kidnapping case 
where we were receiving information that the victim was at the same location as our cell phone, and that she was 
severely injured and close to death. We got some phone tiaffic, and had people searching the sector we identified 
from the DCS-300Q. It was outstanding to have the location information immediately instead of having to spend 20 
minutes getting it from the phone company. The problem was that your sector information uosjabboo. When we 
had a couple of hits off adjacent cell sites, but opposite sectors. I got suspicious and called i | be cell 

location in the DCS was accurate, but the sector info was wrong on both of the cell sites we were hitting. We had 
to send our searchers off in the opposite direction, having blown 45 minutes. As it turned out, the virhole thing was 
a hoax and there wasn't really a life and death situation, although it just as easily could have been one. Bottom 
line, bad info is worse than no info. From now on, we are going to be treating the DCS mapping info as a head 
start, but we are still going to be calling the phone o)mpany to confirm the info. This negates one of the great 
advantages of the mapping system, but it doesn't yet seem to be at a level where we can rely on the DCS mapping 
info as a primary source. 


Given the potential utility of tills system, which is phenomenal, I really think you guys should ^ to scrounge more 
resources for the project. We should have somebody in your unit whose primary responsibility is the building and 
maintenance of the cell site data base, with frequent and regular contact with the carriers. This thing could really 
be a fantastic tool. 


One thing that is cumbersome that I think could be improved is the fact that you use th dl fc oftware 

running on a computer at ERF, with the screen shots being transmitted out over the network. Theprobleni with 
this is that we are not able to use the features of the mapping software, such as zooming in or out or clicking on 
points to get an address, at the user terminal. We have to have a map book next to the terminal to overcome this. 

Why can't we load the software at the DCS-3000 workstation, and have the local software query your database? 
That would be twice as useful, 

As I understand it. l I takes a big chunk of memory because it loads one giant map of the whole 

country. If we usec|____|we could load m aps bv state , which would greatly reduce the memory required, if 
that is an issue. Actually, it would be nice to use l because it is a program that all of m e TT As 

already know how to use for tracking. Also, if there is a licensing/cost issue with i 1 1 thini J I 

at PSU has a huge licensing agreement witf| that would probably allow us to put it on an of our DCS- 

3000 machines. 


These are some comments and suggestions for improvement, but overall you guys really have put together some 
great stuff. 




be 

b7C 


S^ET 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


□(OTP) (FBI) 


Sent: 

To: 

Cc: 

Subject: 


b6 

lb7C 


□(SE)(FBI) 
W 1-2 6 PM 


3m m 


(ERHFBI) 


DCS-3000 Comments 


UNCLASSIFIED b6 

NON-RECORD b7C 


fo2 

lb7E 


□ 


just wanted 


to pass on a few comments regarding the cell site mapping function on the DCS-3000. 


First, we were using the mapping funtion last Friday (right after I got off tiie phone with you) on a kidnapping case where 
we were receiving information that the victim was at the same locaHon as our cell phone, and that she was severely injured 
and close to death. We got some phone traffic, and had people searching the sector we Identified from the DCS-3000. It 
was outstanding to have the location information immediately instead of having to spend 20 minutes getting it from the 
phone company. The problem was that your sector information was wono. When we had a couple of hits off adjacent 
cell sites, but opposite sectors, i got suspicious and calle d i The cell location in the DCS was accurate, but the 

sector info was wrong on both of the cell sites we were hitting. We had to send our searchers off in the opposite direction, 
having blown 45 minutes. As it turned out, the whole thing was a hoax and there wasn't really a life and death situation, 
although it just as easily could have been one. Bottom line, bad info is worse than no info. From now on, we are going to 
be treating the DCS mapping info as a head start, but we are still going to be calling the phone company to confirm the 
info. This negates one of the great advantages of the mapping system, but it doesn't yet seem to be at a level where we 
can rely on the DCS mapping info as a primary source. 


Given the potential utility of this system, which is phenomenal, I really think you guys should ^ to scrounge more 
resources for the project. We shbuid have somebody in your unit whose primary responsibility is the building and 
maintenance of the celi site data base, with frequent and regular contact with the carriers. This thing could really be a 
fantastic tool. 

One thing that is cumbereome that I think could be improved is the fact that you use thd ^ftware running 

on a computer at ERF, with the screen shots being transmitted out over the network, i ne prooiem witn rnis is that we are 
not able to use the features of the mapping software, such as zooming in or out or clicking on points to get an address, at 
the user terminal. We have to have a map book next to the terminal to overcome this. Why can't we load the software at 
the DCS-3000 workstation, and have the local software query your database? That would be twice as useful. 

As I understand id jfokes a big chunk of memory because it loads one giant map of the whole country. If 

we usec i I wecdlllfll bbdmaDsby state, which would greatly reduce the memory required, if that is an issue. 

Actually, it would be nice to us d I iust bec ause it is a Droorann that alloftheT TAs already know how to use for 

tracking. Also, if there is a licensinq/cost issue with | ^ thin kj B t PSU has a huge licensing 

agreement with i t hat would probably allovvUS 10 pUl It Ofl 811 Of our oCS-iboO machines. 

lb 2 

These are some comments and suggestions for improvement, but overall you guys really have put together some great 1 6 
stuff. b7C 


1 — 1 

O SE^T 


SeatUe 



UNCLASSIFIED 

1 

l(OTD) (FBI) 



From: 

Sent: 

To: 

lb 6 
.b7c 

Cc: 

Subject: 



UNCLASSIFIED 

NON-RECORD 



All, 

We need to have a contingency exercise tomorrow to test the following systems: 


CODIS 

CHEMNET 

CPUIMS 

DCS 3000 

POISS 

LEO 

NCIC 

NICS 

PTSS 

RDEX 

SACS 




C) s|(!^T 


I I 


Thanlfg 


b2 

b6 

b7C 

b7E 


u nclass i fieo 




UNCLASSIFIED 


I lOTD) fFBh 


From: 

Sent: 

To: 


Cc: 

Subject: 

bo 

b7C 

UNCLASSIFIED 

NON-RECORD 



.(OTD) (CON) 

‘SS~ 90 Q 5 S.io PM 
[OTD) (FBI) i 


](OTD) (FBI) 


JOTD) (FBI) I I 


I am trying to finalize the time slots for the Technical Exchange Meeting on Monday 17 October in the Milwaukee Field 
office. The time slots are: 

09:00-11:00 
11:00 -12:00 Lunch 
12:00-14:00 
14:00 - 16:00 


The two sessions that I am looking to TICTU for presentations are on the DCS3000 paw and uncnm inn technologies and 
on the DCS5000 areas for system improvements. I have discussed my desires wth i b n the DCS3000 but 

f iat this session may be confused with the Subject Matter Expert presentations. I have also mentioned this to | | 
or the DCS5000 but have yet to get a commitment. ' — ' 


My initial thoughts were to have the 12:00 slot for the DCS3000 and the 14:00 slot for the DCS5000. Please let me know if 
that works or an alternate slot that works better. 


ELSUR Technology Management Unit 


El< 

5401 

540 

540 


leQtrenifi Suty< 

40 (I 

40 (I 

40 (< 


reillance Technology Section, OTD 
;Desk) 

;Fax) 

[Cell) 


b2 

b6 

b7C 


UNCLASSIFIED 





From: 

Sent: 

To: 

Cc: 

Subject: 


UNCLASSIFIED 

NON-RECORD 


FYI, for the DCS-3000 (see below) 


fc6 

fe7C 


UNCLASSIFIED 

NON-RECORD 


bo- 

I I 

Regarding the DCS-3000: 

(1) a complete description of the types of FISA information stored: 

The only information collected and stored by the DCS-3000 is pen-register/trap-trace data. Per CALEA, this information is 
intercepted by the targets' service providers and delivered to the DCS-3000 in standard formats. The information is 
parsed based on target telephone number and stored in text-formatted files for each terget. 

(2) an explanation of how FISA information can be searched and retrieved: 

Most field offices use the DCS-3000 as a "front-end" collector. The pen-register/trap-trace information collected by the 
DCS-3000 is uploaded to the Telephone Application (TA) database at HQ. The FISA pen-register/trap-trace information 
can be searched using search tools provided by the TA database on FBI Net. The DCS-3000 also has a rudimentary 
report generation feature and simple text-based search tools for use by technically trained agents and system 
administrators. 








I l (OTD) (FBI)r 
Subject: RE: ^ 


' SEOBET 

l(OTD)(FBI) ' 


UNCLASSIFIED 

NON-RECORD 


All: The FISA Court (FISC) is seeking information about "( 
information from FISA intercepts that is not in indices. 


i“ that contain raw FISA material or U S. person 


b an fill in the gaps and correct any misstatements below.) 

I ) a complete descnption of the types of FISA information stored: 


(3) how the FBI'S standard minimization procedures are implemented; Linguists read and sign the court orders 
certifying that they understand the minimization guidelines specific to each case. 


uaiso various iegacy systems Inciudind 


DCS-3000: 1 le an answer the questions about DCS-3000 below.) 

(1) a complete description of the types of FISA information stored; 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how th e FBI's standard minimization procedures are implemented; 

I bellev^ lean answer the questions below.) 

( 1 ) a complete deScnpilOn AT Vie types of FISA information stored; 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented: 



(1) a complete description of the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented; 


NY Tech Cut Database I 


Jin NY can direct you to someone who can answer the questions below.) 


(1) a complete description of the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented: 


338 ^ 

S^JKRET 



a 


Q 


S^ET 


From: 

Sent: 

To: 

Cc: 


Subject: 


lOTD) (FBI) 

I on (FBI) 

Monday, Octo5er24. 2005 2:36 PM 
' rCD^ /FB I\ 




fCD)(FBnr 


(01U)(FBI)T 
RE: ■- 


l)(f=BI)£ ^ 

JCyD) r CONi 
rt))(FBI)r“ 

(OTD) (f%lT" 


|(0I )(FBI)L„ 

^>NY]fFBn ir 


UNCLASSIFIED 

NON-RECORD 


All; The FISA Court (FISC) is seeking information about 
information from FISA intercepts that is not in indices. 


5” that contain raw FISA material or U.S. person b2 

. b7E 


C 


3an fill in the gaps and correct any misstatements below.) 


(1) a ponipJfi^^dftspMo.P-9.Ul3g tYP?? informp(|pp s^or^; 


(2) an explanation of how FISA information can be searched and retrieved; Access to FISA audio Is generally 
restricted to the linguists assigned to the case, the supervisor, the case agent, and the system administrator In 
the office where the audio is collected. Users can search and retrieve FISA audio by Signal Related Information 


time of call, outaoino telephone number dialed, etc.ll 


(3) how the FBI's standard minimization procedures are implemented: Linguists read 
certifying that they understand the minimization guidelines specific to each case. 


anJi 


sign the court orders 



elieveQ 


^Mn a 




DCS-3000; , 

( 1 } a complete descnption 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented; 


answer the questions about DCS-3000 below.) 
OT the types of FISA information stored; 


be 

b7C 


fo2 

b7E 


JbelieveC 


^can answer the questions below.) 


(1) a complete description of the types of FISA information stored; 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented: 

kr 



\i to mu ifuytiuoiibi uuiuw.j 

(1) a complete description or tne types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented: 

NYTet 


(1) a complete description of the types of FISA information stored; 


3 NY cah direct you to someone who can answer the questions below.) 




b6 

b7C 


LET 


9 


i: 


From: 

Sent: 

To: 

Subject: 


be 

b7C 


Jptdmfbi) 


I t OTDMFBh 

tell Sites lnformatlon*^°^°^ 


](OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 


Below is a brie 
comes into the 

f descriotion ofi tSFVs exoerience. I haven't talked to him directiv on this subiect but will when he 




Thanks 


SENSITIVE BUT UNCLASSIFIED fcVE 


lormiFBi) 

From: 

1 IfMMI fCON^ 


Sent: 

Thursdav. Aoril 06. 2006 11:25 AM 


To: 

I kfOTDI fFBII;! 

IrOTPI (FBI) 

Cc: 


ilMMI fFBh£ 

bCS 

rTMMHCON) ' 


Subject: b7c 

GR 30 setup 



Importance: High 

SECRET 

RECORD 269-HQ-1366780 


bl 

b2 

be 

b7C 

b7E 


(S) 


pO - GR30 is setup and connected to the The liro b f the card is | j 

"•lease advise as to what further coordination is required between us (Miami), the CO and your end. 



eLsuR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTO) 




fee 

b7C 


SE^T 


a 



SECRET 


From: 

Sent: ^6 

To: 

Subject: 


1 (OTP) (FBI) 


I tNY) (FBJ) 

Sunday, June fs, 2006 2:( 

RE: DCS 3000 question (S 


4 PM 

(OTD) (FBI) 
MS) 


UNCLASSIFIED 

NON-RECORD 


I I b2 

Is there a way fo i i o decode the SMS that actually have content? Currently, the message appears to be in a fc v e 

hexidecimal format under the T elephony log. 


Thanks, b6 

___ b7C 


— Original 

From; I 


* ' Prjrlav tunp'lf , JAnK tlrf-; PM 

To: I INY) (FBO 

Subject: RE: DCS 3000 question (SMS) 


UNCLASSIFIED 

NON-RECORD 


o 


be 

b7C 


I looked at the raw data. The SMS messages that did not show a message all had a message length of 16 bytes. The 
SMS messages that were decoded all had message lengths much greater and varied, and the GSM headers in these 
were from 4 to 14 bytes long. And, most importantly, the SMS messages with no message content all followed 
incoming calls that were redirected to voicemail. So, I think you're getting ail the pertinent content from tiie intercepted 
SMS messages: the ones with no message content are most likely voicemail indications sent to the phone. 


□ 


From: I I NY1 (FBI) 

Sent: , FrifliW, IllHP Ifi, ?nflfi4:p5 PM 
To: I I IroTD^ (FBI) 

Cc: ' 


Subjecb 1X3 3000 question (SMS) 


UNCLASSIFIED 

NON-RECORD 


□ 


b6 

b7C 


343 


SECRET 


We currently have FISA coverage on | ^jw ith SMS coverage. The attached SMS log shows quite a few 

h 2 messages, but there is no associated ISSA OR them with the exceptions of a few. 

ib 7 c Additionally, the mes yaaes do not show up in i F 'or the few messages that actual^ appear in the SMS log, the 
b 7 E message appears in i l under the T elephony log as hexidecimal num bers. 

Thanks, 



« Fll ^ | » b7E 

UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


I 

From: 

Sent: be 

To: b7c 

Cc: 

Subject: 


1(OTD) (FBI) 


J(NY) (FBI) 

6.2QQ6..4.0&. 


f m yrm 

DCS 3000 question (SMS) 


>M 

OTD) (FBI) 

31) 


lb2 

b7E 


UNCLASSIFIED 

NON-RECORD . b6 

b7C 

□ 

We currently have FISA coverage o i j 'ith SMS coverage. The attached SMS log shows quite a few 

messages, but there is no associated text on most or them with the exceptions of a few. 

Additionally, the me ssages do not show up i H I For the few messages that actually appear in the SMS log, the 
message appears i 1 I mderthe Telephony log as hexidecimal numbers. 

Thanks, 

I i be 

21 ^ I b7C 




344 



UNCLASSIFIED 






I 

From: 

Sent: be 

To: b7c 

Subject: 


IfOTD) fFBl) 

I ni (WF) (FBI) 

Thursday. December 01. 2005 4;03 PM 

RE; TA Uploads 


UNCLASSIFIED 

NON-RECORD 


Thanks. I am going to forward this to □ 

— Original Message — 

Frpm; I 


TO! 


□oTD) (Fai) 
I, 2005 3:34 


Subject: TA Uploads 


01 , 
VF)(FBI) 
](bTD)(FBI) 


foe 

fo7C 


UNCLASSIFIED 

NON-RECORD 


□□ 

We are working on a "single file" upload scheme for the DCS-3000. This new method will combine all CDNRS 
formatted call records for all DCS-3000 targets into a single file for upload to TA on a periodic basis (once a day or 
once a week or whenever you choose). The software solution should be available within the next two weeks. We vnll 
also provide you with a CD or DVD writer (which ever you choose) to use with the new system. Hopefully, this will 
reduce the resource overhead and make TA upload a more pleasant experience. 

b6 
b7C 

UNCLASSIFIED 



UNCLASSIFIED 


345 

SEplfET 



RE: TTEC Question 


|(OTD)(CON) 

B,4;30 PM 
iOTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I will just use DCS3000. Thanks man. 


— Original Message — 

From: I t OTD^ (FBD 

Sent: Wednesday. April 05. 2006 4:2 8 PM 

To: I T oTD) (CON) 

Subject: kc: i i cl yuesdon 

SEN .SITiyEAUTU N C^^^ 

NON-RECORD 


I suppose. I'm not sure what a bi-lateral result is .. 


Subject: TTEC Question 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Jmenfoned the Canadians using the DCS3000. Can 1 use this or anything else as a bi-lateral result? 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


S^ET 



From: I "I rQTDWCON^ 

Sent: be -Iyasila^MPi^.^2p.Q.6.5.;48 PM 

To: b7c I l (QTm (FBI) 

Subject: TTEC Question 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 


Jnentioned the Canadians using the DCS3000. Can I use ttiis or anything else as a bi-lateral result? 


*E Rh;ANNbX 


be 

fo7C 


SENSITIVE BUT UNCLASSIFIED 


~|OTD) (FBI) 


From: 

Sent: 

To: 

Subject: 


}tD) (FBI) 
1L01 AM 
J(OTD)(FBI) 


Vw: contingency plan intormation 


~r b7c 

RECORD 319-HQ-A1487677 


— Original 

From: I I fOTOVCON^ 

Sent , H9nflfY.M3A.Z9B6 10: 19 AM 

To: I l OTDl (FBI) 

Subject: RE: Contingency plan information 

TFrHETffNOroriM 
RECORD 319-HQ.A1487677 


Can you oi j [ send a copy to^ 


(O) 703 

(P) TOS- 
CO 703- 


Jtictu ISSO 


be 

b7C 


— Original 

From: I i rOTD^ (FBI) 

Sent: Monrta» onnis g ;S8 AM 

To: I If OTDVCONl 

Subject: RE: Qintingency plan information 


JSecD) (FBI) 
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S^ET 




0 


9 


RECORD 319-HQ-A1487677 


I p ays he already did this for the 3000. 
thanksi 


From: ^ l/nTn^rrnM) 

Sent: MnnHav iniv'^1 ?nn <; g ;36 AM 

To: I t OTD^ (FBI) 

Subject: FW; Contingency plan information 


RECORD 319-HQ-A1487677 



I (OTD)(CON) 
rangency pian information 


RECORD 319-HQ-A1487677 


<< File: scenariol.doc ?> The form Is in the back with the lessons learned, please 
personalize to your system. 


From: I t OTDVCONI 

Sent: Monday. July 31, 2006 7:24 AM 

To: I I SecDI (FBI) 

Subject RE: Contingency plan Inmrmation 


RECORD 31944Q-A1487677 


Attached is our contingency plan. It Is setup as a guideline for the individual s ites to follow in the creation of their 
own contingency plan. At the ERF, we have a working copy of the | ^s yst em. This sy stem is not a 
production system as it is only used for development Should it oo aown a s^on <j Is vstem is located in 

the CSOC. That system can serve as a backup in the event ERF or some other site goes down. I don’t know that 


S^ET 


this plan has been fully tested as it would require re-provisioning phone lines (read cost money). 


« File; DCS 5000 APPENDIX Q Contingency Plan.doc » 



(O) 70j 

(P) 703| 
(C)70: 


Itict lj ISSQ 


foe 

fo7C 


-"Oflfllnsl issaqe — 

From: I (FBI) 

Salt: , Friday Iiilv 7B ?nt)fi 7-, SO PM 

To: I b TD^fCON’l 

Subject: RE: Contiiigency plan information 

UNCLASSIFIED 

NON-RECORD 


We need a test contingency plan for the DCS 3000 system. I will provide you the 
training information auid we need to test this plan asap. Therefore, one day next 
week. The auditors are here and are looking for documentation for a tested 
contingency plan for this system. 


Thanks 


fob 

fo7C 


From: T blPycONt 

Se nt: Monday, J uly 24, 2006 9:45 AM 

To: l ~ ~ I SecDI (FBI) 

Subject: FW: Contingency plan Infotmatlon 

UNCLASSIFIED 

NON-RECORD 


be 

fo7C 


Exacfiy what do you need concerning the DCS 5000? If you have a pony that would be nice. 

I Iticttjisso 


(O) 70S 

(P) 7031 

(C)703L 


— Original 

From: I 

Se nt; Monday. J olv 17. 2006 2; i ? pm 

IrOTDUFBn-l 


□(OTO) (FBI); 1 
FW: Contingency plan intorniatjon 


~ IroTDirFBn 
J(^)(CON) 


UNCLASSIFIED 
NON-RECORD fo6 

b7C 


Can your ISSO provide the information requested for the DCS-3000? 


349 


S^ET 


Thnx, 



be 

b7C 


h2 

foe 

fo7C 


O S^ET 9 

CZl 

— Original Mes age — 

From: I I rSecD^ (FBI) 

Sent Monday. July 17, 2006 12:16 PM 

Toi l 1fOT D)(CX)N) , , - - 

Cc t t OTD) (CON) i tO TD) (FBI)l |(OTD) (FBI) 

Sulqea! re: Conongency plan inrormaoon ' ' 

UNCLASSIFIED 
NON-RECORD fo6 

fo7C 


I need contingency plan results for the following systems: 

Data Collection System 3000 
Data Collection System 5000 


I " 1 

— Original Me 


□(OTD) (FW) 
IU2:12 PM 
TJsecD) (FBIJ, 


U(OTD) (FBI) 


RE: Contingency plan Information 


UNCLASSIFIED fee 

NON-RECORD fo7C 


JcriD) (CON);[ 


] (OTD) (FBI); 


Per our phonecon I l is the ISSO for the systems in question. I'm 

sure he will be able to provide anything you need. Though I believe that he may be out 
of the office at least part of this week. 


ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

ERF. Quantico, VA 

Tel: (7031 

Cetl:(202 

Fax:(703 


— Original Mbss mb — 

From: | |SecD) (FBI) b6 

Sent ' MArtaSv. July U. JIJHbp :26AM b7C 

To: I r OTDI (FBD 

Subject: Contingency plan information 

UNCLASSIFIED 


S^ET 





o 


NON-RECORD 

I I 

I need contingency plan results for the following systems: 

Data Collection System 3000 
Data Collection System 5000 

Thanks, 

» 1 

UNCLASSIFIED 
UNCLASSIFIED 
UNCLASSIFIED 
UNCLASSIFIED . 

UNCLASSIFIED 

UNCLASSIFIED 


lnwA«flnatlnn« 



DCC L AOC i rY on. LU lO TT T 


SECRET//NOFORN 



SECRET//NOFORN 


he 

b7C 







S^ET 


a 


Additionally, is the SMS PRTT data stored in Proton? And if so is it input solely into Proton or is it also stored 
locally in the field? 

be 

Thanks. b 7 c 



Ori^ 

From: L 


aoe-- 


](CTD) (FBI) 


Sent Thursday. January 19 . 2006 4:02 PM 
To: i l( CTD) (CON) 

Subject- FW; djuesoon about SMS messages 


SECRETffORCQN.NQFORN 
RECORD 31SM-Hq-SECRET 


□ 


— OriajigUte 

From: L__^ 
Sent jhugd 


To: 1 

JaD)(FBI) 

Ca 1 

fOTD) (CON) 

Subject: Kt: QuesDon aoaut ^ 

Ims messages 


SEeRef//ORCON.NOFORN 


□ 

My experience with sms is those sent to/from cell phones (don't know if there's any other use). Those are 
normally collected when we go up on a cell phone. DCS-3000 is designed to collect the sms (and its pretty good 
at is). So, if we are talking about is getting sms for a particular cell phone, with an order authorizing sms collection 
any TTA in the field can easily do it. 


Other than that, I am thinking it would just be another network collection where we would tap into their system and 
collect data base on identfiers. 




— Oiginal Messgflfc;;;; 

From: I I rCTPl (FBI) 

Se nt! Thursd ay. }anuary 19, 2006 3:49 PM 

Te: l I fOTPl (CON)r 

Subject: FW: Question about !>lvj5 messages 


SEGRETffORCQN.NQFORN 


Any answer? 


be 

b7C 


JOTD) (FBI) 


Thanks, 


SB 


‘T 
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9 


— Original Mesaae — 

From: I 


3 oTD)(FBI) 



JOTDXFBI) 


UNCLASSIFIED 

NON-RECORD 


e 


foe 

b7C 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepte using DCS 3Q00, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CO with the 
training course and instructions. All we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21.2006. 

If you are unavailablejojgvjewjhi^^ know. Questions concerning this course review can be 

directed to | i 

Thank you for your help ensuring that we produce a quality training product. 



be 

fo7C 


UNCLASSIFIED 

UNCLASSIFIED 


1(°TP)C=BI) 


From: 

1 l(CQ)(FBI) 

Ti^esd^Yi •'''?¥ ■■ ^9°^ 1 :S4 PM , 


To: 

1 |(ER) (FBI); CLIFFORD. MICHAEL (ER) (FBI);| 

1 

Cc: 

!l 1 ^(ER) (FBI): 1 tR) (FBI)J 

^R) (FBI); 

Subject: 

nj ^y09) (FBI) ' 

fo2 

UNCLASSIFIED 

NON-RECORD 


b7E 


I agree with ) [ reasoning. We are going to have to be very careful with how we craft this letter i.e. we point out 

that we believe mat mere is a disconnect between what VW's upper management desires to be done and what their 
negotiating team is currently offering to law enforcementj^g 

---Original 


□eR) (FBI) 


Sent! Tuesday. Mav 18. 2004 1:48 PM 
To:l " *|-COUFBIt: CLIFFQ 

Cc| ^R) (FBI)j; 

(Dh luiJ) (mij ' 


lSJ2ia!&EUER)(FBI)£: 

I erHFBdJT 


1TOTPbi);| 


KEiajiFfiU, 




356 



Thanks! I well done. 


b-7C 




Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Investioaiu&Jiecbriology Division 


(703)| I 


h2 
lb 6 
b7C 
b7E 


Or iainar Message 


3R)(FBI) 


Sftnb Frlriav. May 14. 2004 3:00 PM 
TnJ f rFRI 


I 


Subject: 1 

W^rFRT|^ 


](ER)(FBI); 


UNCLASSIFIED 

N p NiRECORB 


Gentlemen. 

I thought vou irj iaM be interested to know that we have successfully intercepted a i I 

'hs I b st phone in real-time w ith our DCS 3000 sy stem. The results are better than 

c: expected and we're ahead of schedule. 1 | has not yet fully deployed the solution 

E throughout their network, but it should not oe too much longer. 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


. UJiiCl^SI glED . 



359 



I— I 

Excellent io d I your engineers are ahead of schedule. I don’t want to pre ss vou. but p lease let me know when h 6 
you think you will be prepared to provide assistance to DEA with their ongoinj Intercepts. b c 


^ st called to inform me that the New Yor k State Police INYSP> have a Title III court order for a 
a phone in a drug case. The cable com pany is! | is assisting with the 

interception through former CIU contract em plovel" I I ddllfefitioH bdk' company is Saitek. The NYSP 

expect to have the intercept up this Monday. iTvill provide us with updates next week. 


— Original Message — 

From: CUFFORD, MICHAEL (ER) (FBI) 


Se nt; Friday. Mav 14. 2004 4:15 PM 
To il IL. (ERKEffl 

cd l7Cgr(FBi):l 


lect: RE:r 


fFBI) 



NON-RECORD 


SEI 


b2 

bb 

b7C 

b7E 


Gentlemen, 

I thought you might be interested to know that we have successfully intercepted a l . . 

test phone i n real-time with our DCS 3000 system. The results are better than expected and we're ahead 
of schedule. r h as not yet fully deployed the solution throughout their network, but it 

should not be too much longer. 

nzi 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


I 

From: 

Sent: b6 

To: b7c 

Cc: 

Subject: 




■^CQHFBI) 

r2D0^ 


Yflddy, Mdy U, 1^004 5:30 PM 
CLIFFORD. MICHAEL (ER) (FBI)L 
I |(ER) (FBI):r 

VfB||| nPy {FBI] 


“jERHFBh 

HER) (FBI):[ 


]eR) 


UNCLASSIFIED 

NON-RECORD 


Excellent jol l | your engineers are ahead of schedule. I don't want to o£essj<QU|but please let me know when you 
think you will oe prepared to provide assistance to DEA with their onooin ci I ntercepts. 

FYI. I L st called to inform me that t he New York State Police fN YSPI have a Title III court order for a broadband 

phone in a drug case. The cable co mpany is i k^ sistino with the interception through former 

CIU conj£acLepiployee|^_^_| The collection box company i^ |The NYSP expect to have the intercept up this 
Monday] lill provide us with updates next week. 

Original Message 

From: CQFFORD, MICHAEL (ER) (FBI) 

Sent: Friday, May 14, 2004 4:15 PM 




9 

S^ET 

o 


To:l 

rER) (FBI) 

1 — 



Cc;l 


|(ER) (FBI);| 

tER) (FBI);| 

Z] 

(erTTFBDL^ 

Subject: ^ 




' b2 

b7E 


UNCLASSIFIED 

NON-RECORD 

Thanks I | well done. 


Michael P. Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Inve stigative Technol ogy Division 
(703) r I 


2QQ4 3:00 PM 



lER) (FBI); CLIFFORD, MICHAEL (ER) (FBI);[ 


]{ER)(FBI);[ 


b2 

b7E 


UNCLASSIFIED 

NON-RECORD 


Gentiemen, 

I thought you might be interested to know that we have successfully intercepted 

Phone in real-time with our DCS 3000 system. The results are better tiian ex(»cted and we're ahead of schedule. 
I ras not yet fully deployed the solution throughout their network, but it should not be too much 

longer. 

bo 
b7C 


unclassifiep 




UNCLASSIFIED 


363 


UNCLASSIFIED 



UNCLASSIFIED 




We have a new design for the Client we would like you to test for us (since it was your idea). The idea is one master 

or primary (the more aolitir^lv enrrect termt Client that all secondary aiente communicate with for infnmnatinn nn 

Warrant information updatej 


/ 2 ]| Tn maifp this happen | need to know the iP address of the primary Client (I assume this will be your current Client on 
' and the addresses of all the secondary Clients you want to have this feature. 


I ,J SD) (FBi) 

Thursday. August 17. 2006 2:42 PM 

I irsn! ISD) (CON)p 

(SD) (CON) 

RE; Single Warrant Database for DCS 3000 Clients (almost) 


UNCLASSIFIED 

NON-RECORD 


This sounds great. I can't take credit for the idea. It was actuallyP 
that info to you today or no later than tomorrow. Thank you! *" 


vho brought It to my attention. I will get 


— Original Message 

From: 

Sent: 


UNCLASSIFIED 

NON-RECORD 


l(OTDKFBI) 

Aoe 11:35 AM 
JSD) (FBI) 

for DCS 3000 Qients (almost) 


We have a new design for the Client we would like you to test for us (since it was your idea). The idea is one master 
or primary (the more politicall y correct term) Client that all secondary Clients communicate with for information on 
Warrant information updates. I 


^ppen, I need to know the IP address of the primary Client (I assume this will be your current Client on 
hd the addresses of all the secondary Clients you want to have this feature. 
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UNCLASStFlED 


SEI 




UNCLASSIFIED 


ZtOTP) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


□(SD) (FBI) 


Tuesday. August 15. 2 006 6:26 PIVL 
' 1 (OTD) (FBI t 

J (SD) (CONjQ 


](OTDHEaiL- 




^ 

ICS3000 


- l(OTDi 

J(SD)(CON)[ 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

be 

Please call | | on Wednesday. 8/1 6/06 to get the l h afile and j j xtfile. ^ 

Thanks for all your help. 


l(OTP)fFBI) 


From: 

Sent: 

To: 

Subject: 


■ IfSD) (FBI) 

Monday. August 14. 2006 4: 53 PM 
' ■ ■ tOTD) (FBOf 

vsUCSSOUO * *■ 


J (OTD) (FBI) 



fee 

b7C 




ssions are now enroute. 


Oiiainal Messaoe — 

From: | ICOTO) (FBI) 


5 8:44 AM 
SD) (FBI) 
ID) (FBI) 

Cc f r&- 

Subjecb ltt:| |ig pcsaotm 


RECORD 



[ZZI 


be 

fo7C 


b2 

b7E 


Last Wg^Qg^ay, we set a trap on the high side of the one way push system to verify data delivery from the DCS-3000 
to th j l ave you seen any discrepancies since Wednesday? If so. please fonvard a sample to us so we can 
investigate using the packet sniffer data. 


□ 


— Originam^age;; 


Wednesday, A 








](Ptd)(fbi) 


¥ 



From: 

Sent: 

To: 

Subject: 


be 

fc.7C 


I 1(SD) (FBI) 

Tuesday, Au.qus^08, 2006 5:57 PM 
i , l(OTD) (FBI) 

RE: DCS3000 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Thank you 


From: ^ I ° l fQTD^fmn 


Sent: Tuesday. August OB. 2Q Q6 1:23 PM 

To: I ^ (FBI) 

Subject: RE: DCS3000 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


bo 

b7C 


We’ll give It a shot. Good idea. 

□ 


foe 

fc7C 


Sant Tuesday, August 08. 2006 2:18 PM _ 
To: I ^^n iOTD) (F8I)C 

Subject DCS3000 


3oTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


At the risk of sounding lazy, is it possible to have an auto-update feature that would allow the input of a target into 
the warrant database on one client that would then allow you to select other clients you would like to populate with 
this same data. For many different reasons, some good, some not so good, we are in a position where we have 
the same target in multiple clients and not all are always remembered to be update at renewals. 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SEpl^T 


I 


SENSITIVE BUT UNCLASSIFIED 


SEQl^T 



SENSITIVE BUT UNCLASSIFIED 
NO!i:RECgRD 


At the risk of sounding lazy, is it possible to have an auto-update feature that would allow the input of a target into the 
warrant database on one client that would then allow you to select other clients you would like to populate with this same 
data. For many different reasons, some good, some not so good, we are in a position where we have the same target in 
multiple clients and not ali are always remembered to be update at renewals. 


SENSITIVE BUT UNCLASSIFIED 



SECRET 


370 


SECRET 



From: tg CIIZZIZI^(SD) (FBI) 

Sent; u 7 r Wednesday, Iwarch 01. 200 6 1 1 :50 AM 

To: ' I ^(OTD)fFBI) 

Subject: te^06o5^/l5 reporting ' 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


The SMS Filter batch report you created for us works great. Thank you. 

If possible, can this be formalized to be included as a report pick on the DCS3000 so that any number can be searched by 
date mnge as is possible now for phones, while also allowing for the display of message content when authorized by T-lll. 

Please let me know how I can help. 


SENSITIVE BUT UNCLASSIFIED 


(OTD) (FBI) 



StripperGate.rtf (23 


SENSITIVE BUT UNCLASSIFIED 

NON-RECORD 


Thought you might find the attached article interesting. The investigation involved the intercept, on 
VoiceBox and DCS3000, of numerous phones, both wireline and wireless, and microphones with the 
collection of tens of thousands of sessions over an almost two year period. 


Thank you. This could not have happen without you. 


SENSITIVE BUT UNCLASSIFIED 


lOTDXFBI) 


From: 

Sent: 

To: 

Subject: 


be 

b'/C 


I IfSD^ (FBI) 

Mffliday-iapuarY 1Q. 2QQ5,6:3s pm , 

I I(ITD^ (FBni 

Upcoming TCTkeg^ onal Conferi^ 


llTDHCON) 


NON-RECORD 


Thank you for the opportunity to provide input. I have always found the conferences to be very beneficial. b? e 

A "State of the Switch Based Intercepts" (where it is, where it’s going, and how if s going to get there) presentation is 
always helpful, especially in light of the new technologies being introduced by a number of Carriers, and the rash of recent 
Carrier mergers. ^^aiLQieao would be especially interested in the status of DCS3000 CDC data being allowed to 
be pushed to the | [ system. 

The individual Carrier presentations are always informative and may be especially helpful again in light of the new 
technologies being introduced by a number of Camers, and the rash of recent Carrier mergers. 

Discussions with the Carriers regarding the ir hours of operation (24/7/3 65i would be extremely ben eficial as w ell as 
discussions concerning keeping current the l l ata and orovidi nq^ Inf o about each] ^ you are 

already aware the Agents have come to depend heavily upon the DCS3000's | I capabilities. ' ' 


fos 

fo7C 


— Original Mesage — 

From: l f lTD^ (FBI) 

Se nt; Tuesday. Janua ry 04, 2005 7:13 AM _ 

1(ITD) (FBI); |~~ l (ITD) (FBl);r 


CcC 


Subject: Upcoming TICTU Regional Conferences 


JlTD) (CON) 


UNCLASSIFIED 

NON-RECORD 


In the first half of 2005 the Telecommunications Intercept and Collection Technology Unit (TICTU) plans to once again 
host two regional conferences. These forums will provide specialized training b field office practitioners responsible 
for telephone ELSUR operations and foster cooperation between the FBI and the nation's telecommunications 
industry. 

TICTU is currently developing the agenda for these conferences and requests your suggestions for agenda topics and 
carriers of particular interest. We need your in put as soon as possible so that we c an set a tentative agenda. You 
may send your ideas to me via email or contact P" I 



UNCLASSIFIED 


From: 

Sent: 

To: 

Subject: 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 

□ 

I did an RMS for a new DCS 3000. Our current DCS is a Dell Optical and has been having virtual memory problems and 
recently has been locking up and having to re-allocate FAT file. This DCS also does not have a CDR which would be nice 
to have. The second DCS would be an addition to our systems and would be used by case agents to check cell sites 
using the tracker program. We would like this computer to have the multiserver and client password protected. 


bo 

b7C 




^special Agent 


Te chnical Prog rams - Indianapolis Division 

Jcell) 


UNCLASSIFIED 


^IOTDHFBI) 


Sent: 

To: 

Cc: 


□(OTC 

20051: 


[OTD) (FBI) 


I YoTDHFBni 

IfOTDI fFBh 

I lOTDI fFBh 



UNCLASSIFIED 

NON-RECORD 


I have spoken again wit ^ I getting clarification on his proposal for the microphone system interface. We are 

trying to get our other contracior starred down a supportable path in the near future. One question of critical importance 
that must be answered before they can is whether they would need to transfer VOC files or would be passing a 

^ , ,. ,pearsasifthe 


be 

b7C 

b7E 


VOC formated stream. After talking with | l and a technical person from the DS-3J 
consensus is that a VOC file transfer through the DS-3000 might be the best option, 
the other company will be going up for a pr 
be answered be fore he goes. I spoj 
J We want to ' 

;hanges 
administration features 


lo is the COTR for 


vant to koiMjl 
s to the! 
s within ! 


review next week, and it wouid be very helpful it this one question could 
llast Thursday and he felt this would allow sufficient time to get an answer 
I receive and process VOC files transferred through the 3000 unit with 
System or if a VOC stream would be required in order to have available all the file 
If either or both of you feel additional information would be required of us, I can 


fronT 

minimal or no c 

administration f( , 

be available, if scheduled, pretty much anytime between now and Friday, early afternoon. 




373 




Please let me know if it is not possible to get this answer by Friday. If it is not, please let me know what we must do to get 
this question answered and provide some time frame to work within so that we can give appropriate guidance to the other 
contractor for. 


UNCLASSIFIED 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


The service you provided was instrumental in the successful rescue of the kidnap victim. Well done 

Hopefullj P [ service will only improve in case something like tt»is happens again (should be when it happens again). 

Thanks for taking the late night and weekend calls, jj. ^ 

I I b7C 

— Original 

From: t b n (FBI) 

Sent: Wednesday. September 2 0. 2006 11:26 AM 

te I TsiurerljF^ ^ ' ' t iP) (fbi); | | gp) fFBn:i irsn (con) 

Subiect: Tech Victocy 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD . , 





Subject: OCS-3000 Tier EC and Boundary Document 

Importance: High 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


All. 

I have completed an updated architectural drawing. Please take a look and let me know if it is accurate. I want to get the 
Tier EC out this week and get things moving on this system. 



DCS-3000 DCS3000 

rreditation Boundarjeditatlon Boundary 

Regards, 



SENSITIVE BUT UNCLASSIFIED 



UNCLASSIFIED 
NON, R ECOR D . 


)ut-of-office response. 


Original Message 

Froin: r~“ I (OTP) (FBI) 

Sen t; Tuesday. June 06 . 2006 11:50 AM 
To: I I (OGC) (FBI) 

Subject: 0\it oH Utiice AutoReply: Urgent request-DAG short -fused PIA tasking 


I am currently oui 
Acting Unit Chief 


t i^3£UJae-a££ice for_ao_e]£Lefid< 
| at 703- 1 > 3 


led period of time. Plea: 
|at 703 


|f. cinnf.flfiL^ n 


l(OGQ (FBI) 

~3LD) 

_ in roDkFBn 
ncais) ( FBi)C-_ 
■*-^ais)fFBnl~ 


Ifais) (F BUl 

iOTDUFBn:! 


UNCLASSIFIED 

NON-RECORD 


This is a fbilow-up to my e-maii below (and to yesterday’s e-mail from Gcl to ADs.) , which resulted in you folks 
being identified as the likely ticket holders for this action (due Friday). *■ " '■■■" ■ 

This Is taken from a list provided me~l apologize for any misspellings. Also, if you're not the right person, please contect 
me ASAP to dime out who is. 

I will try to contact you by phone later today, but please feel free to call me first if you’d like (202 1 1 As detailed 

below, actions require completion of at least one and maybe more Privacy Impact documents for the following systems for 
which I understand you are the POC. (I assume the ISSO probably has primary ticket, but tiiis would be for ISSO and 
owner to work out.) 


Chemical Network; ISSO; | 
CJISWAN: ISSO; 


S^ET 

^ystem Owner. Q 


Data Collection System 3000; ISSO; Q 


Uystem OwnerjQ 


: 




] /System Owner.[|| 
^ /System 


Owner; AD Perkins 


Financial Management System; iSSO j 

Field Office Integrity Security System ISSO; ?? (DAD Thomas) /System Owner. AD Haynes I ll'm sending to you 
with request you ID ISSO or POC.) I I 

I s involved in PIA). 


lAFIS IS^OC 


~I/Svstem Owner: 


JIS (Note; Please coordinate with! 
|Nho are already involved.) 


j]/System Ownei^ 


] (also I believe^ 


XTS300 Controlled Interfaces ISSO; 
help identifying POC since I didn't fine 


I I'm sending to you 


foe 

forfc^c 


— Ori^al M« 

From: 

Sent: 


IbS 

fo7C 






(FBI )I _ 


iifBDr" 




H§gcDL. 


-i<gg)cf 


5 




[[^ais) (fbi£ 


[CTBir 


rran | 


"waisHFBnd 


T TFB n -r 


irdljC 




□jrasr 


l(OGQ (FBl)r 


Urgent request-DAG short-fused PW tasking 
High 


mi ^(oGotmij |Ut.L)(mi);r 

□fcjis) (fbdJ_ Jais) (FBI)* 


Uspo 


UNCLASSIFIED 

NON-RECORD 


This requests the tasistance of the "To" addressees to meet a short-fused, very high-visibility DOJ tasking that 
the FBI received yesterday. The tasking relates to requirements by DOJ (passing down requirements by OMB) 
that agencies must on a quarterly basis certify 90% completion (for all FBI systems) of Privacy Impact 
Assessments (PIAs) required by Section 208 of the E-Govenunent Act (E-Gov). To meet the two deadlines 
imposed by DOJ, we will need completed inputs by affected divisions by 6/9 and 6/21, as described below . 

The FBI has been doing our own PIAs for years, and we have known about the changes looming under E-Gov 
for many months. We have, however, been long awaiting specific implementation guidance from DOJ, which 
has only just moved to resolution with the very recent arrival and identification/assumption of responsibilities of 
DOJ's new Chief Privacy and Civil Liberties Officer (Jane Horvath). This culminated in the 5/30/2006 DAG 
memo which we received yesterday (TRIM 06/DO/3020) directing the FBI to focus on the 28 FBI Law 
Enforcement systems on the FBI's 2006 FISMA inventory (see attached). 



FISMA_LH_Spreads 
heet (version ... 

OGC remains responsible for coordinating the PIA process, and we are doubling the OGC personnel assigned to 
PIA-processing to work exclusively on this tasking through completion. 

But I can't emphasize strongly enough that PIA completion also depends on the absolutely essential 




UNCLASSIFIED 

UNCLASSIFIED 



UNCLASSIFIED 

NON-RECORD 


This is a follow-up to my e-mail below (and to yesterday’s e-mail from GC Caproni to ADs.) , which resulted in you folks 
being identified as the likely ticket holders for this action (due Friday). 

This is taken from a list provided me-t apologize for any misspellings. Also, if you're not the right pereon, please contact 
me ASAP to dime out who is. 


I will tty to contact you by phone later today, but please feel free to call me first if you’d like t2D2 J I As detailed 

below, actions require completion of at least one and maybe more Privacy Impact documents for the following systems for 
which I understand you are the POC. (I assume the ISSO probably has primary ticket, but this would be for ISSO and 
owner to work out.) 



be 

b7C 


SI 


J 



sigRn< — 


UNCLASSIFIED 

UNCLASSIFIED 


OTD) (FBI) 



Importance: High 


UNCLASSIFIED 

NON-RECORD 


Regarding NY Tech Cut Database: 


1. The EC requesting OGC concurrence/ruling was sent to HQ in April. 

2. Since OGC did not respond yet, NY did not implement it 

3. We may first go to EDMS database before we get a reply from OGC, rendering NY Archive 

unnecessary ■ ■ 


4. if additionaU 
NYCDC Office, r 


bis database is needed, please contact SA 



UNCLASSIFIED 

NON-RECORD 


382 


T 





9 


S^ET 


All; The FISA Court (FISC) is seeking information about "databases" that contain raw FISA material qt U.S. person 
information from FtSA intercepts that is not in indices. 

I l ean fill in the gaps and correct any misstatements below.) 

y 1 i a complete descripBon of the Woes of FIS A information stored: 

(2) an explanation of how FISA information can be searched and retrieved; Access to FISA audio is generally 

restricted to the linguiste assigned to the case, the supervisor, the case agent, and the system administrator 
in the ofRce where the audio is collected. Users can search and retrie ve FISA audio bv Signal Related 
Jnformation (dateftime of call, outgoing telephone number dialed. etc.H ^ 

(3) how the FBI's standard minimization procedures are implemented; Linguists read and sign the court orders 
certifying that they understand the minimization guidelines specific to each case. 

I (also various legacy systems includino t H (I believel (can answer the 


DCS-3QQ0: 1 b an answer the questions about DCS-3000 below.) 

(1) a complete description of the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented: 




(1) a complete description of the types of FISA information stored; 

(2) an explanation of how FISA information can be searched and retrieved; 

(3) how the FBI's standard minimization procedures are implemented: 


NY Tech Cut Database I 


In NY can direct you to someone virfio can answer the questions below.) 


(1) a complete description of the types of FISA information stored; 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented; 


FromI IfCD) (FBI) fe7C 

Se nt: Tuesday. Octo ber 18, 2005 2:11 PM 
Toi l HC OI) (FBI) 

Subject: 





UNCLASSIFIED 

NON.RECORD 


o 


J 


Q 


SE^I^ 


b6 

b7C 


Good afternoon, — 

I attended the EDMS meeting witlj 


>C 


^roJ 


>m NSLB last week. 


The FI SA Court h as requested some information on how the FBI is handling FISA information in its various 
)l databases f b sked me to contact you regarding any FBI databases (besides EDMS and DWS) that contain: 

(1) raw FISA take, or (2) US person information from FBI FISA collection that has not been indexed into general 
FBI indices. For each of these databases, the Court is asking for (1} a complete description of the types of FISA 
information stored, (2) an explanation of how FISA information is handled, specifically the manner in which data 
( S ) , can be p arched and retrieved- anri fa) how the FBI's stendard minimization procedures are implemented. 

I I specificaity mentione di p nd NYs database as examples). Also, are these databases considered to 
oe suD-systems/databases of tuMav 

I appreciate any assistance you can give me. Please let me know if there are other POCs who are better able 
to answer the questions. 

.IhaoKs^ , 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 



Do you have a point of contact at 
State of Nebraska? 


SE^T ^ 

ot i ^ hat I can call to see about getting l [ software for the 


Thanks, 




10755 Burt Sfreet^ 
Om aha. NE 6811 4 
(4021 
(402 


114 

jiell 


b2 

be 

b7C 

b7E 


UNCLASSIFIED 


1(OTD) (FBI) 


From: 

Sent: 

To: 


b6 

b7C 


Subject: 


3secD)(CON) 


Monday. Auaust 21 . 2006 8:55 AM ^ 
■ pWCONir 


n (Seem 


:iTOD) (FBI);! 
(FBI) ■“ 




(FBnr 




lOTD) 

FBI): 


UPDATE, Immediate inspection data call... URGENTMII 


UNCLASSIFIED 

NON-RECORD 


All... 

For reporting: 

Please send (emailji^o^responses to my unit chief, I Ion FBI Net) He will ensure they are passed to 

the inspector, f j Thank you. * ^ 

be 

fo7C 

IlSSM) 

Quantico Complex 

CIS M. CISSP. rs s, PSEC, MCSE 

<703 1 I Bid 9 , room 9 -U .-14 

..."IMO, VAI 16 W, or get out of the way." Thomas Paine 


□ (SecD)(CON) 
M06 9:5iACa_ 


iUEffi)! — 

^ITOD) (FBI)! 

I data call... URGElTTf 


Subjed:: Immediate Inspection data call... URGEni!!!! 

Importance: High 


UNCLASSIFIED 

NON-RECORD 








"tRHFBnr 




]:OTO) (CON); 


All; 

Attached is a DOJ form that MUST be completed ASAP!!! 

Answer the questions to the best of you ability, with "unvarnished" answers!!! The inspectors WILL compare your 
written responses with their actual finding during tiie inspection. If the answers are "NO, or I don't know”, so state... 
do NOT fabricate answers that can not be verified/proven. 

Once you've completed the form... CALL me for submission instructions please! I 

385 




|(SecD)(CON) 

Fririav Aijnii«8t 1S ? finfi 9;56 

IfLDHFBnr 

wwmnr VoTPHcomr 

I I ^6td) (FBJ)[“ 

immeaiate inspection data call... URGENI!!!! 


H(ITOD)(fbi): 
FlD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Attached is a DOJ form that MUST be completed ASAP!!! 

Answer the questions to the best of you ability, with "unvarnished" answers!!! The inspectors WILL compare your written 
responses with their actuai finding during the inspection. If the answers are "NO, or I don't know", so state. . . do NOT 
fabricate answers that can not be verified/proven. 

Once you've completed the form . . . CALL me for submission instruction s oleasel! fo 6 

Specific questions about the form should be addressed to the inspection POC| 202| | 

Systems are; ^ 

CWAN, CODIS, VICAP, CART SAN, OPDC LAN, DCS 3000, DDMS, ChemNet 


mss oao ceed 

tANDBOOK - Merg.. 


CIS M. CtSSP. IS S. PSEC, MCSE 

17031 B id 9. room 9-LL-U 

...’’lead, follow, or get out of the way." Thomas Paine 






Subject: be 

Location: b7c 

DCS 3000 meeting 
Bld9LLconfroom.(#3547) 


Start: 

End: ' 

Show Time As: 

Wed 4/19/2006 10:00 AM 
Wed 4/19/2006 11:00 AM 
Tentative 


Recurrence: 

(none) 

b7C 

Meeting Status: 

Not yet responded 


Required Attendees: 

1 IfSecDi fCONi:| 

|{SecD)(FBI);| | 


1 KOTD1 fFBh 


Ail; 

This meeting is for the DCS 3000, which expires in May, 2006. 

iSSO: Please bring a CURRENT system drawing, and be prepared to discuss the ’’delta" between the current system, and 
the system of record to determine if this will be a re-accreditation, or if a re-certification will be required too? 

Thanks.... 


KOTD) (FBI) 



From: I l<t^n\(r.nhiy 

Sent: ^6 Wednesday Octo ber 12 2005 8:58 AM 

To: I ISecDH FBPr l( OTDUFBI) 

Cc: I k OTD) {FBI);r^ 1(OTD) (FBI) 

Subject: ke: Task Force Operations 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


All... 

Can we arrange a meeting to see what I can do to assist with this request? 
Thank you. 



— Or iginal Message — 

From; ! l (SecD) (FBI) 

te nt: Wednesday, Octo ber 12, 2005 7:52 AM 

To: ! i fOTDUEBD 

Cc; | (FBI)J l(OTD) (FBI);| |(SecD)(CON) 

Subject: RE; Task Force Operations 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


S&6iET 


387 





b6 

lb7C 


IZZI 



€ 


I'm no longer the ISSM for Quantico. The interim ISSM is I land I've cc'ed him 

on this message. Sorry for the delay as I’ve been out sick for two weeks. 


be 


CSO, Qu antico Complex 
ERF (703j I 


—Original Message — 


. . -SjtZZZZZHoTD) (FBI) 

Sent; Thursday, September 29, 2005 5:34 PM 


3SecD) {FBIi_ 


K OTD) (FBI)i_ 
t; Task Force Operations 


□(OTDHFBI) 


SENSITIVE BUT UNCLASSIFIED 

NP. N -R ECPR D 


^ rleF 


e FBI is involved with many Task Force operations which are in need of our assistance in performing 
CAI FA nen renisters and rail Rhone cell site mapping functions We have recently had a reque; ' 

I with our DCS 3000 system. 


\ 

irieii upen 


Id I visited the site last week and would like to talk to you about what we can do to sup^rt 
lerations. Please let me know if there is a time Hiat we can talk to you about this situation. 


b2 

b6 

b7C 

b7E 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 



Q 



W. fDiv09) fF Bn 

Subject: RE: | ~~| 


1 (EBlLEail 


] 


UNCLASStFIED 

NON-RECORD 


We may now want to reconsider softening the tone of our draft letter t( j 1 

Is it still clear tha i T s an issue? I am hearing conflicting reports from the engineers. 


b2 

b6 

b7C 

b7E 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR 
OGC APPROVAL 

I I 

Associate General Counsel • Unit Chief 
Technolc^y Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
QuantIc o.VA 22135 

Tel. 702| 

Fax. 70| 


b6 

b7C 


— O rjolnal Message— - 
Fromd ifCO) (FBn 

Sent; Friday, May 14, 2004 5:30 PM 
To; CUFFORD. MICHAEI^TER) (FBir 


1 rrWTTFB! 



Subject: RE: | 

1 


^R) (FBI) 
]]1r)(FBI);[| 


IJeR) (FBl j I 


UNCLASSIFIED 

NON-RECORD 


Excellent io ti I vour engineers are ahead of schedule. I don't want to press you, JMJalease let me know 
b2 when you think you will be prepared to provide assistance to DEA with their ongoin g! I ntercepts. 

fob 

b7c FYI .I l ust called to inform me that the New Yor k State Police fNYSPI have a Title III court order for a 

b7 E broadband phone in a drug case. The cable oomn anvisi M fc assisting with the 

interception through former CIU contract emploveeT IThe collection box company is Saitek. The 

NYSP expect to have the intercept up this Monday, r fr ill provide us with updates next week. 

b6 

Original Message- — b7c 

From; CLIFFORD, MICHAEL (ER) (FBI) 

Sent: Friday, May 14. 2004 4:15 PM 

To| I CE R)(FBI) ^ ^ ^ 

■Cci - ■ I (Cq,).,C^I)a ^ER) (FBI) J (ER) (FBI); 

I l?g5T7FBi) T^ m mr ' ' 

390 


fob 

fc7C 


b2 

be 

b7C 

Ib7E 


Subject: 



# 


# 


#1056287 


UNCLASSIFIED 

NON-RECORD 


Thanks 




Michael P. Clifford, Jr. 

Section Chief be 

Electronic Surveillance Technology Section b7c 
Inve stigative Tech nology Division 

(703 ] I 



](ER) (FBI);[[ 


]er) (FBI); 


UNCLASSIFIED 

NON-RECORD 


Q ght you might be interested to know that we have successfully intercepted a l 

est phone in real-ti me with nur ncs sn nn system. The results are better than expected and 
we le ahead of schedule. 1 h as not yet fully deployed the solution throughout their 

network, but it should not be too much longer. 


n 


UNCLASSIFIED 


Uti pLASSIFjED 


391 

seDlkT 


UNCLASSIFIED 


